General
-
Target
c58c2949ed8a37b1e249d1407c975dac
-
Size
750KB
-
Sample
211027-t5jlzsffh8
-
MD5
c58c2949ed8a37b1e249d1407c975dac
-
SHA1
46f23e54f7461b2f833869c2b351a7c606defdae
-
SHA256
7144729552a1b5ded6df7bcd87d5a555621af84b1a3f246772b23b296cb33d65
-
SHA512
82f50ff8b3003dfad778a11efc5d20c180618fac5f32502fe0d9292edbd0ec9e797efb33315bfa62b368b195084aa6ca1d677757b702d6443d1c23e6fe280aa6
Static task
static1
Behavioral task
behavioral1
Sample
c58c2949ed8a37b1e249d1407c975dac.dll
Resource
win7-en-20210920
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
c58c2949ed8a37b1e249d1407c975dac
-
Size
750KB
-
MD5
c58c2949ed8a37b1e249d1407c975dac
-
SHA1
46f23e54f7461b2f833869c2b351a7c606defdae
-
SHA256
7144729552a1b5ded6df7bcd87d5a555621af84b1a3f246772b23b296cb33d65
-
SHA512
82f50ff8b3003dfad778a11efc5d20c180618fac5f32502fe0d9292edbd0ec9e797efb33315bfa62b368b195084aa6ca1d677757b702d6443d1c23e6fe280aa6
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-