General
-
Target
rayzhd.rar
-
Size
664KB
-
Sample
220611-vfy6tachg8
-
MD5
f95adad3ef40acfd27ab6863fd3c2508
-
SHA1
4edede712e418838f20876fd492ca48c7467a67c
-
SHA256
99435f6e7cbf300f5d8d18e31f3a1b6ed70fdca596a4cc895f96558813a0feac
-
SHA512
229ab416256bc01f26db6a58479b4b29a8285d17d822d40988bc96ce9315abce88652b75d7ff3440266a302dc8c3961356a33bdda112d169d0613a4d08132ac9
Static task
static1
Behavioral task
behavioral1
Sample
rayzhd.dll
Resource
win7-20220414-en
Malware Config
Extracted
dridex
10222
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
rayzhd.rar
-
Size
664KB
-
MD5
f95adad3ef40acfd27ab6863fd3c2508
-
SHA1
4edede712e418838f20876fd492ca48c7467a67c
-
SHA256
99435f6e7cbf300f5d8d18e31f3a1b6ed70fdca596a4cc895f96558813a0feac
-
SHA512
229ab416256bc01f26db6a58479b4b29a8285d17d822d40988bc96ce9315abce88652b75d7ff3440266a302dc8c3961356a33bdda112d169d0613a4d08132ac9
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-