General
-
Target
004794e402932e0fd28ea3a9afa51cc1a7f9d11987bd80e3d0b978657936452d
-
Size
608KB
-
Sample
211014-hvaesagccl
-
MD5
02b47aadf24bacba44e1b0a6b0cfc3c7
-
SHA1
74940a6dd66871e570d2b7dcf9cfcac9d6c21c8d
-
SHA256
004794e402932e0fd28ea3a9afa51cc1a7f9d11987bd80e3d0b978657936452d
-
SHA512
1efff1158a647bbc3a2968578f86477a09a0cae546f6d4bc6affc008f306ca0bfc2028e319985f695128b30ad73850debba558ef25fe509cca9b5dd89dcac249
Static task
static1
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
004794e402932e0fd28ea3a9afa51cc1a7f9d11987bd80e3d0b978657936452d
-
Size
608KB
-
MD5
02b47aadf24bacba44e1b0a6b0cfc3c7
-
SHA1
74940a6dd66871e570d2b7dcf9cfcac9d6c21c8d
-
SHA256
004794e402932e0fd28ea3a9afa51cc1a7f9d11987bd80e3d0b978657936452d
-
SHA512
1efff1158a647bbc3a2968578f86477a09a0cae546f6d4bc6affc008f306ca0bfc2028e319985f695128b30ad73850debba558ef25fe509cca9b5dd89dcac249
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-