General
-
Target
de6176ae6c775a525407ea9deb6535b2fca239c95bc8add44239a04847d0ffa5
-
Size
608KB
-
Sample
211014-hvcj5sgda7
-
MD5
12a0a76dfeac4dd0b7c4a81060422b80
-
SHA1
57d098d03e14f9b0f97d87625ca9b9e44e65b262
-
SHA256
de6176ae6c775a525407ea9deb6535b2fca239c95bc8add44239a04847d0ffa5
-
SHA512
55f712e66dbd50d9aecb10a2cc613a6ee94f80c806b94ee183bfaf342c82b68cb3e32268355dcb635e41329cb458b1b76cace5539f62e25560333822ad40901e
Static task
static1
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
de6176ae6c775a525407ea9deb6535b2fca239c95bc8add44239a04847d0ffa5
-
Size
608KB
-
MD5
12a0a76dfeac4dd0b7c4a81060422b80
-
SHA1
57d098d03e14f9b0f97d87625ca9b9e44e65b262
-
SHA256
de6176ae6c775a525407ea9deb6535b2fca239c95bc8add44239a04847d0ffa5
-
SHA512
55f712e66dbd50d9aecb10a2cc613a6ee94f80c806b94ee183bfaf342c82b68cb3e32268355dcb635e41329cb458b1b76cace5539f62e25560333822ad40901e
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-