General
-
Target
8ba232fa928c7e69201f47f0cf216001
-
Size
750KB
-
Sample
211027-vhzkcsfgd8
-
MD5
8ba232fa928c7e69201f47f0cf216001
-
SHA1
cb1e795ba0578f99cc7172034c52daa77cf8684e
-
SHA256
e07ae56f0cb20f2bc6a9a5dab953bd97e4a4c2047d784dab106d3fd3eb535b3c
-
SHA512
f7ce37d1b7bdab7deeab730107dfa0e05e132648cd51c415c9baecf52af35d78316f1a0a35550f9b0cc7d5dbc70b97028201665771d12592e6b8593b817b9dd8
Static task
static1
Behavioral task
behavioral1
Sample
8ba232fa928c7e69201f47f0cf216001.dll
Resource
win7-en-20210920
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
8ba232fa928c7e69201f47f0cf216001
-
Size
750KB
-
MD5
8ba232fa928c7e69201f47f0cf216001
-
SHA1
cb1e795ba0578f99cc7172034c52daa77cf8684e
-
SHA256
e07ae56f0cb20f2bc6a9a5dab953bd97e4a4c2047d784dab106d3fd3eb535b3c
-
SHA512
f7ce37d1b7bdab7deeab730107dfa0e05e132648cd51c415c9baecf52af35d78316f1a0a35550f9b0cc7d5dbc70b97028201665771d12592e6b8593b817b9dd8
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-