General
-
Target
raw0rbp9s.rar
-
Size
311KB
-
Sample
220611-vfykaachg7
-
MD5
af7dde49c27f97cd77b03a8ace70beea
-
SHA1
daafa2be3a79192b311774db9bc7123a6040825f
-
SHA256
163fe3e1545012147aeca9c14a90a0d7f52f624f664d8365052657a76fc481a4
-
SHA512
52700a5fc9b93bc65a78d64c3ab50fcc0cdbd3c87a12679eb1fdf912ff1bdfa6a3a5942a4b1e58cecd928154383fc07831bb67ff6e35d753a279210f60c64633
Static task
static1
Behavioral task
behavioral1
Sample
raw0rbp9s.dll
Resource
win7-20220414-en
Malware Config
Extracted
dridex
10444
77.220.64.37:443
80.86.91.27:3308
5.100.228.233:3389
46.105.131.65:1512
Targets
-
-
Target
raw0rbp9s.rar
-
Size
311KB
-
MD5
af7dde49c27f97cd77b03a8ace70beea
-
SHA1
daafa2be3a79192b311774db9bc7123a6040825f
-
SHA256
163fe3e1545012147aeca9c14a90a0d7f52f624f664d8365052657a76fc481a4
-
SHA512
52700a5fc9b93bc65a78d64c3ab50fcc0cdbd3c87a12679eb1fdf912ff1bdfa6a3a5942a4b1e58cecd928154383fc07831bb67ff6e35d753a279210f60c64633
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-