General
- Target 59128e46bb0e23b4b892d01c0ae70218de61c9a7439c80659bff8ef2489ca099
- Size 373KB
- Sample210322-8vne5pgc8a
- SHA256 59128e46bb0e23b4b892d01c0ae70218de61c9a7439c80659bff8ef2489ca099
- MD5 19bc551df7dfd4930b199504abd520cb
- SHA1 1288e384dfe9bacfdad6578aa52941860bbe5101
- SHA512 ed52367698f9f706d31874d079956008077fd06f566265688a5e2101987ee8d6be5d724e3335cff3bbb736f1c819c94083131c7529ae7081459043bb094fde98
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
59128e46bb0e23b4b892d01c0ae70218de61c9a7439c80659bff8ef2489ca099.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
210.65.244.179:443
-
37.247.35.130:6601
-
103.18.108.116:6601
rc4.plain
rc4.plain
Targets
-
- Target 59128e46bb0e23b4b892d01c0ae70218de61c9a7439c80659bff8ef2489ca099
- Size 373KB
- SHA256 59128e46bb0e23b4b892d01c0ae70218de61c9a7439c80659bff8ef2489ca099
- MD5 19bc551df7dfd4930b199504abd520cb
- SHA1 1288e384dfe9bacfdad6578aa52941860bbe5101
- SHA512 ed52367698f9f706d31874d079956008077fd06f566265688a5e2101987ee8d6be5d724e3335cff3bbb736f1c819c94083131c7529ae7081459043bb094fde98
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.