General
-
Target
fa4714cebde67aa6f0836c109ea48e455382c1a77496c8e538db5c18b3eecc8d
-
Size
750KB
-
Sample
211027-waka5sfhf9
-
MD5
6ae646759586997921f5d29eba94ebdb
-
SHA1
3fb4c738c39c1a5d6aa74ce685125c59d4c16c91
-
SHA256
fa4714cebde67aa6f0836c109ea48e455382c1a77496c8e538db5c18b3eecc8d
-
SHA512
8d7fc52677beb5f3ca96a9623307d5c2be9021d790a55b52dc156a00ab86e16db7d803d8d20ef80e0de77f317e7be50f3dc8e42776c47c023f0004b5f11c6aaf
Static task
static1
Malware Config
Extracted
dridex
10555
192.46.210.220:443
143.244.140.214:808
45.77.0.96:6891
185.56.219.47:8116
Targets
-
-
Target
fa4714cebde67aa6f0836c109ea48e455382c1a77496c8e538db5c18b3eecc8d
-
Size
750KB
-
MD5
6ae646759586997921f5d29eba94ebdb
-
SHA1
3fb4c738c39c1a5d6aa74ce685125c59d4c16c91
-
SHA256
fa4714cebde67aa6f0836c109ea48e455382c1a77496c8e538db5c18b3eecc8d
-
SHA512
8d7fc52677beb5f3ca96a9623307d5c2be9021d790a55b52dc156a00ab86e16db7d803d8d20ef80e0de77f317e7be50f3dc8e42776c47c023f0004b5f11c6aaf
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-