General
-
Target
SecuriteInfo.com.Trojan.Win32.Sabsik.FL.Bml.31988.10720
-
Size
750KB
-
Sample
211027-v7rk2sfhd2
-
MD5
1bb9681e00cbfcc83a6fc90fb0c64e89
-
SHA1
22b2d4c7d8cf378ee880aae3a18dfa5032097690
-
SHA256
42a47f17057fb35640a3cda046872aff8a6a529b82cb3b1e3c83c82f78b412ea
-
SHA512
b69a8b490cecef7c87bb7221ea17607c04f9ae73e46db5a68c95a3d58f4bd103f18aa52c300eee17e55f77181cadddc5e34f3165b9b4a6011d43f645e1bd3659
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.Sabsik.FL.Bml.31988.10720.dll
Resource
win7-en-20211014
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
SecuriteInfo.com.Trojan.Win32.Sabsik.FL.Bml.31988.10720
-
Size
750KB
-
MD5
1bb9681e00cbfcc83a6fc90fb0c64e89
-
SHA1
22b2d4c7d8cf378ee880aae3a18dfa5032097690
-
SHA256
42a47f17057fb35640a3cda046872aff8a6a529b82cb3b1e3c83c82f78b412ea
-
SHA512
b69a8b490cecef7c87bb7221ea17607c04f9ae73e46db5a68c95a3d58f4bd103f18aa52c300eee17e55f77181cadddc5e34f3165b9b4a6011d43f645e1bd3659
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-