Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
16-11-2020 05:36
Static task
static1
Behavioral task
behavioral1
Sample
teaov.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
194.150.118.7:443
49.212.179.180:3889
69.64.62.4:4443
rc4.plain
rc4.plain
Signatures
-
Processes:
resource yara_rule behavioral2/memory/1628-0-0x0000000000400000-0x000000000043D000-memory.dmp dridex_ldr -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Processes:
teaov.exedescription ioc process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA teaov.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1628-0-0x0000000000400000-0x000000000043D000-memory.dmpFilesize
244KB