General
- Target efff85a18781f09f3ca667a021c8a13e1953dc2ded1ccb0eafeff4ae233016c1
- Size 876KB
- Sample210324-by2byvjgfx
- SHA256 efff85a18781f09f3ca667a021c8a13e1953dc2ded1ccb0eafeff4ae233016c1
- MD5 988442d6ce307bac0ec1cf2ba3518d91
- SHA1 370431c26093bbc5553186cb8f5d99bdd5d8240b
- SHA512 06a372bbf172b5a4750e4b7cda187f50c3c449e645ce3e3e0b910000aab027a9d09fca35372ed7d630fb0b38560dbda579913b3bd10c637275fcba4529effd71
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
efff85a18781f09f3ca667a021c8a13e1953dc2ded1ccb0eafeff4ae233016c1.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.192:443
-
103.6.213.203:6601
-
46.41.130.218:2303
rc4.plain
rc4.plain
Targets
-
- Target efff85a18781f09f3ca667a021c8a13e1953dc2ded1ccb0eafeff4ae233016c1
- Size 876KB
- SHA256 efff85a18781f09f3ca667a021c8a13e1953dc2ded1ccb0eafeff4ae233016c1
- MD5 988442d6ce307bac0ec1cf2ba3518d91
- SHA1 370431c26093bbc5553186cb8f5d99bdd5d8240b
- SHA512 06a372bbf172b5a4750e4b7cda187f50c3c449e645ce3e3e0b910000aab027a9d09fca35372ed7d630fb0b38560dbda579913b3bd10c637275fcba4529effd71
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.