General
-
Target
338c51d1626cec578cea2269af6538ab60028371c834754542c083999317614e
-
Size
608KB
-
Sample
211014-hvgh4agcdl
-
MD5
8a6b89b7ab98086851afc750ea43e530
-
SHA1
15bf1c93d5c34b7e7087145f206991352ca76e40
-
SHA256
338c51d1626cec578cea2269af6538ab60028371c834754542c083999317614e
-
SHA512
1dd01861f2ce75e2ecfbbb4316dab211217cff47574f7df7e8f3dbeaf256319c1ba761c009716bab3ae2db3012123b0ddf6b1bbab711ed6bec3b6e67642d61e8
Static task
static1
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
338c51d1626cec578cea2269af6538ab60028371c834754542c083999317614e
-
Size
608KB
-
MD5
8a6b89b7ab98086851afc750ea43e530
-
SHA1
15bf1c93d5c34b7e7087145f206991352ca76e40
-
SHA256
338c51d1626cec578cea2269af6538ab60028371c834754542c083999317614e
-
SHA512
1dd01861f2ce75e2ecfbbb4316dab211217cff47574f7df7e8f3dbeaf256319c1ba761c009716bab3ae2db3012123b0ddf6b1bbab711ed6bec3b6e67642d61e8
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-