General
-
Target
y8vuadjl6.jpg.malware
-
Size
664KB
-
Sample
240506-v2fllabf8v
-
MD5
1205fb909fa4296198f238397d1be1dd
-
SHA1
b521307713c2c53921ce34591d6efbdffd6a2769
-
SHA256
b3d39d279e1741d4d8d808e028ebac9057308c6555b18426cfcb43d7c3bb7010
-
SHA512
36c78c85cab27c5cde24acb8f7208b535e511f71a4b1342499984b57c2eb72426d3aee12b065c884a22e02c3d709040bf861003d5ef32eec0843061488a8ecd7
-
SSDEEP
12288:z/0Qzqf0eOi48HM+6TFKywVt6PbEYU0eyJTT/Mu9oV01uLoaEP:r0zhO0n6TFKywvCbEOxDMu9oypaEP
Static task
static1
Behavioral task
behavioral1
Sample
y8vuadjl6.jpg.dll
Resource
win7-20240419-en
Malware Config
Extracted
dridex
10222
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
y8vuadjl6.jpg.malware
-
Size
664KB
-
MD5
1205fb909fa4296198f238397d1be1dd
-
SHA1
b521307713c2c53921ce34591d6efbdffd6a2769
-
SHA256
b3d39d279e1741d4d8d808e028ebac9057308c6555b18426cfcb43d7c3bb7010
-
SHA512
36c78c85cab27c5cde24acb8f7208b535e511f71a4b1342499984b57c2eb72426d3aee12b065c884a22e02c3d709040bf861003d5ef32eec0843061488a8ecd7
-
SSDEEP
12288:z/0Qzqf0eOi48HM+6TFKywVt6PbEYU0eyJTT/Mu9oV01uLoaEP:r0zhO0n6TFKywvCbEOxDMu9oypaEP
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-