General
-
Target
era5ne6.rar
-
Size
373KB
-
Sample
220626-f7xdzagggn
-
MD5
c379b0ae73d8763711c50f57607979fe
-
SHA1
2affa7b64aa34b84172bbdcd8c5a09f340e6a328
-
SHA256
ace691c336e0c9a311681ccd4768d52feacc30e13e667ee577a590bff837caa9
-
SHA512
6790ecd81dd943fdde0f9c03348a8c8f3d0f1a936c89ad3863def66848dc4de58af71d66e6da4a0d54d394d1182897e1c9eb66d64f159886adec3e1d34476e2b
Static task
static1
Behavioral task
behavioral1
Sample
era5ne6.dll
Resource
win7-20220414-en
Malware Config
Extracted
dridex
10444
210.65.244.179:443
37.247.35.130:6601
103.18.108.116:6601
Targets
-
-
Target
era5ne6.rar
-
Size
373KB
-
MD5
c379b0ae73d8763711c50f57607979fe
-
SHA1
2affa7b64aa34b84172bbdcd8c5a09f340e6a328
-
SHA256
ace691c336e0c9a311681ccd4768d52feacc30e13e667ee577a590bff837caa9
-
SHA512
6790ecd81dd943fdde0f9c03348a8c8f3d0f1a936c89ad3863def66848dc4de58af71d66e6da4a0d54d394d1182897e1c9eb66d64f159886adec3e1d34476e2b
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-