General
-
Target
bb6ef01a83b5e55b03acfb062d0fcafc
-
Size
750KB
-
Sample
211027-v94cmahcfr
-
MD5
bb6ef01a83b5e55b03acfb062d0fcafc
-
SHA1
2ef0ff52756ef0fc7f52003ec2a7265ba527bb88
-
SHA256
2d5ae6664eb5248294dd2adb28da85444ba12ddbbda67ac286153639bc51f369
-
SHA512
1e59503f690a9ac7bb06a827a76d4e071597117546ec6d50d2e337bdcef39bd00a3a1b7c6efd9604aef91b832301dea2ee9efd5a1b748be11a3ddbff221e7a5d
Static task
static1
Behavioral task
behavioral1
Sample
bb6ef01a83b5e55b03acfb062d0fcafc.dll
Resource
win7-en-20210920
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
bb6ef01a83b5e55b03acfb062d0fcafc
-
Size
750KB
-
MD5
bb6ef01a83b5e55b03acfb062d0fcafc
-
SHA1
2ef0ff52756ef0fc7f52003ec2a7265ba527bb88
-
SHA256
2d5ae6664eb5248294dd2adb28da85444ba12ddbbda67ac286153639bc51f369
-
SHA512
1e59503f690a9ac7bb06a827a76d4e071597117546ec6d50d2e337bdcef39bd00a3a1b7c6efd9604aef91b832301dea2ee9efd5a1b748be11a3ddbff221e7a5d
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-