General
-
Target
a450f1fd3285e49041ee40cd697140f68f05c287e3d132cf8c622a8138930f33
-
Size
750KB
-
Sample
211027-tw78zsfeh7
-
MD5
4db1e3e4691b725c1140a2bd5858cb1a
-
SHA1
257752364c628409d7d96c776ecbb5bdd5777416
-
SHA256
a450f1fd3285e49041ee40cd697140f68f05c287e3d132cf8c622a8138930f33
-
SHA512
ac764d9153c8e5ad19e5d062369bb2215db2621e2779ca4d6e803565fb76cf58151fd1ea2ceabbc33897cc6ca1ba69749bc537800eb56ef55296282ad9d3034f
Static task
static1
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
a450f1fd3285e49041ee40cd697140f68f05c287e3d132cf8c622a8138930f33
-
Size
750KB
-
MD5
4db1e3e4691b725c1140a2bd5858cb1a
-
SHA1
257752364c628409d7d96c776ecbb5bdd5777416
-
SHA256
a450f1fd3285e49041ee40cd697140f68f05c287e3d132cf8c622a8138930f33
-
SHA512
ac764d9153c8e5ad19e5d062369bb2215db2621e2779ca4d6e803565fb76cf58151fd1ea2ceabbc33897cc6ca1ba69749bc537800eb56ef55296282ad9d3034f
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-