General
-
Target
d1fb509136dea5e9e8873e79a43cd6137d656d4067ac50cb046ecaca400675bb
-
Size
750KB
-
Sample
211027-waarpsfhf8
-
MD5
f54ad059f939dc7d66b0b70598147fca
-
SHA1
648e02d88db633e078dd08e69c31add8cf2db50d
-
SHA256
d1fb509136dea5e9e8873e79a43cd6137d656d4067ac50cb046ecaca400675bb
-
SHA512
7eb751b37e8142047f7bbaede822b67a46885e5d3d5cc66cd455c5c4de6dc01967fcd7e39f49285a0d62a929e9c2bf3e71815e7ba8720e13e481d3fd94e8fb0d
Static task
static1
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
d1fb509136dea5e9e8873e79a43cd6137d656d4067ac50cb046ecaca400675bb
-
Size
750KB
-
MD5
f54ad059f939dc7d66b0b70598147fca
-
SHA1
648e02d88db633e078dd08e69c31add8cf2db50d
-
SHA256
d1fb509136dea5e9e8873e79a43cd6137d656d4067ac50cb046ecaca400675bb
-
SHA512
7eb751b37e8142047f7bbaede822b67a46885e5d3d5cc66cd455c5c4de6dc01967fcd7e39f49285a0d62a929e9c2bf3e71815e7ba8720e13e481d3fd94e8fb0d
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-