Analysis
-
max time kernel
19s -
max time network
111s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
14-12-2020 15:41
Static task
static1
Behavioral task
behavioral1
Sample
999ad6100cddc7a59952dc93da44e2a5.exe
Resource
win7v20201028
0 signatures
0 seconds
General
-
Target
999ad6100cddc7a59952dc93da44e2a5.exe
-
Size
437KB
-
MD5
999ad6100cddc7a59952dc93da44e2a5
-
SHA1
7e3ffaaa4ed8e03a4ea0de28e68a7db65f5ea0ea
-
SHA256
c92bd10d10a5a6d2fe16c3617822f0cab83300b618ebe6e1e9e8175f1b324305
-
SHA512
17e35c1d9d8a92cfb71b80cd0fe87bdda0c9ec6ceab50678c2b7113f69b5a7ed70134456ecd9772fabfa4ed4e604e5f97fd781d609dc03018e9f9149be9693c9
Malware Config
Extracted
Family
dridex
Botnet
10121
C2
87.98.218.33:443
54.38.143.246:691
159.65.79.173:3886
153.122.13.133:1443
rc4.plain
rc4.plain
Signatures
-
Processes:
resource yara_rule behavioral2/memory/2432-2-0x0000000000400000-0x000000000042B000-memory.dmp dridex_ldr
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2432-2-0x0000000000400000-0x000000000042B000-memory.dmpFilesize
172KB