General
-
Target
qqo0sk.tar
-
Size
373KB
-
Sample
220626-gmg9zsbcd7
-
MD5
f87302b39fcf6c96995e1ceba8ae45c7
-
SHA1
8035dbe38ab7cba944ec9435dcf5e6089fa80440
-
SHA256
5318e37342a182a4e56633079a85c630ac8a0ce43b3567d2b00d3b6d2355d91d
-
SHA512
25d09ce2215c55f41c57e28c63f219f2081a712d20e4aec1985e42eb001dfb61556c8013c1e8173129602e26273c08d814cb59052b424bc4e860c22e3d427488
Static task
static1
Behavioral task
behavioral1
Sample
qqo0sk.dll
Resource
win7-20220414-en
Malware Config
Extracted
dridex
10444
210.65.244.179:443
37.247.35.130:6601
103.18.108.116:6601
Targets
-
-
Target
qqo0sk.tar
-
Size
373KB
-
MD5
f87302b39fcf6c96995e1ceba8ae45c7
-
SHA1
8035dbe38ab7cba944ec9435dcf5e6089fa80440
-
SHA256
5318e37342a182a4e56633079a85c630ac8a0ce43b3567d2b00d3b6d2355d91d
-
SHA512
25d09ce2215c55f41c57e28c63f219f2081a712d20e4aec1985e42eb001dfb61556c8013c1e8173129602e26273c08d814cb59052b424bc4e860c22e3d427488
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-