General
-
Target
053652d676b1d8a3a2c8283eabf1317389be7ea6a0fbad290e666e1b604134ce
-
Size
664KB
-
Sample
211014-r9kzhahhf5
-
MD5
fdc6c3a6b5f6b4b425b0ebe26109a7d5
-
SHA1
8b04202a2a7d9bfea984819d78a43ffa0d2764e5
-
SHA256
053652d676b1d8a3a2c8283eabf1317389be7ea6a0fbad290e666e1b604134ce
-
SHA512
a735c1c8c645b7c81065a7b65e6d2fd5c61f15c1bf1e5b388bc564c19e02b32070d296a5813255f2a309d2a7750f39a871f5bbb8733bcbce1f64d2a1201eb252
Static task
static1
Malware Config
Extracted
dridex
10222
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
053652d676b1d8a3a2c8283eabf1317389be7ea6a0fbad290e666e1b604134ce
-
Size
664KB
-
MD5
fdc6c3a6b5f6b4b425b0ebe26109a7d5
-
SHA1
8b04202a2a7d9bfea984819d78a43ffa0d2764e5
-
SHA256
053652d676b1d8a3a2c8283eabf1317389be7ea6a0fbad290e666e1b604134ce
-
SHA512
a735c1c8c645b7c81065a7b65e6d2fd5c61f15c1bf1e5b388bc564c19e02b32070d296a5813255f2a309d2a7750f39a871f5bbb8733bcbce1f64d2a1201eb252
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-