General
- Target 85bb41f80f2c30cb2b8d080ebfd761205e379f2d54fcff208d40a15962f8a4a8
- Size 777KB
- Sample210324-2bwcd8bhla
- SHA256 85bb41f80f2c30cb2b8d080ebfd761205e379f2d54fcff208d40a15962f8a4a8
- MD5 09ec1c162d6861027c0c9fc2faba73e6
- SHA1 73ef29e5e638ecae78a721890f47893a43dfab01
- SHA512 5a9a2dd6931a6aa0d0b1b48ef373973039d7a1f7bce3f0e31ec33475a4015285ad2ed322c96e5736a627c44284d7d248454b194839a9fcc82f5a75c0a3552fb8
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
85bb41f80f2c30cb2b8d080ebfd761205e379f2d54fcff208d40a15962f8a4a8.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.192:443
-
103.6.213.203:6601
-
46.41.130.218:2303
rc4.plain
rc4.plain
Targets
-
- Target 85bb41f80f2c30cb2b8d080ebfd761205e379f2d54fcff208d40a15962f8a4a8
- Size 777KB
- SHA256 85bb41f80f2c30cb2b8d080ebfd761205e379f2d54fcff208d40a15962f8a4a8
- MD5 09ec1c162d6861027c0c9fc2faba73e6
- SHA1 73ef29e5e638ecae78a721890f47893a43dfab01
- SHA512 5a9a2dd6931a6aa0d0b1b48ef373973039d7a1f7bce3f0e31ec33475a4015285ad2ed322c96e5736a627c44284d7d248454b194839a9fcc82f5a75c0a3552fb8
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.