General
-
Target
SecuriteInfo.com.Trojan.Win32.Sabsik.FL.Bml.24982.22597
-
Size
750KB
-
Sample
211027-vskh7afgf7
-
MD5
0ce6b3b88306e4cfae74dd54cd316f40
-
SHA1
55ee6554685cef20149accbf04c9933c1e94ad0a
-
SHA256
f7d6da6581785d667051dc523224e6cf39cc20e33ca514c3ff88ffc68465a806
-
SHA512
20f0a1308b39c018fbb21eb202ab431e56c04f523be196234678636a460e5a2f47e863e099f0103b0fca6f1be3df4f783d86785b3761fb4e74bac38d8d7e3e45
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.Sabsik.FL.Bml.24982.22597.dll
Resource
win7-en-20210920
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
SecuriteInfo.com.Trojan.Win32.Sabsik.FL.Bml.24982.22597
-
Size
750KB
-
MD5
0ce6b3b88306e4cfae74dd54cd316f40
-
SHA1
55ee6554685cef20149accbf04c9933c1e94ad0a
-
SHA256
f7d6da6581785d667051dc523224e6cf39cc20e33ca514c3ff88ffc68465a806
-
SHA512
20f0a1308b39c018fbb21eb202ab431e56c04f523be196234678636a460e5a2f47e863e099f0103b0fca6f1be3df4f783d86785b3761fb4e74bac38d8d7e3e45
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-