General
-
Target
c78zdj.jpg.malware
-
Size
664KB
-
Sample
240506-v1z9lsbf6t
-
MD5
68f95809ba9b346ae75c82d10cb5bf62
-
SHA1
094d74fce8c00a7dcb1d92cae01dd91f1595b4e9
-
SHA256
d40041f60c6a9aae6ac0a04d1a9224f14fcf119cc41d5599941769146524f8ea
-
SHA512
d46f8e3a41dfb6b6487e6d65d2276d4d12b26ab64957fa806b09300e5e17eecbcc5d1a02c4a17b38c34d2816f8455d5845b362326e8e15666daca6de6fb47767
-
SSDEEP
12288:B/0Qzqf0eCi48wM+6TFKywVt6PbEYU0eyJTT/Mu9oV01ueoaEP:B0zhCjn6TFKywvCbEOxDMu9oySaEP
Static task
static1
Behavioral task
behavioral1
Sample
c78zdj.jpg.dll
Resource
win7-20240419-en
Malware Config
Extracted
dridex
10222
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
c78zdj.jpg.malware
-
Size
664KB
-
MD5
68f95809ba9b346ae75c82d10cb5bf62
-
SHA1
094d74fce8c00a7dcb1d92cae01dd91f1595b4e9
-
SHA256
d40041f60c6a9aae6ac0a04d1a9224f14fcf119cc41d5599941769146524f8ea
-
SHA512
d46f8e3a41dfb6b6487e6d65d2276d4d12b26ab64957fa806b09300e5e17eecbcc5d1a02c4a17b38c34d2816f8455d5845b362326e8e15666daca6de6fb47767
-
SSDEEP
12288:B/0Qzqf0eCi48wM+6TFKywVt6PbEYU0eyJTT/Mu9oV01ueoaEP:B0zhCjn6TFKywvCbEOxDMu9oySaEP
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-