General
- Target e4e38b97d0cb5cb3c5d11a3254a89d0199c2c3e43eb51c11c5cc5fab97393d35
- Size 876KB
- Sample210324-ejhssaf6bn
- SHA256 e4e38b97d0cb5cb3c5d11a3254a89d0199c2c3e43eb51c11c5cc5fab97393d35
- MD5 4c30b5933afb72457281497be2207ab3
- SHA1 aa32d14d31c6db80f852cecd41a801c93d659fc0
- SHA512 f30c4b7d4a29677f9b2e60ff796164ed0f1239754101b7c761070bd8161409277dad1297351987673a21c84e70fb5764367a88819285e52f54541ae361f60c31
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
e4e38b97d0cb5cb3c5d11a3254a89d0199c2c3e43eb51c11c5cc5fab97393d35.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.192:443
-
103.6.213.203:6601
-
46.41.130.218:2303
rc4.plain
rc4.plain
Targets
-
- Target e4e38b97d0cb5cb3c5d11a3254a89d0199c2c3e43eb51c11c5cc5fab97393d35
- Size 876KB
- SHA256 e4e38b97d0cb5cb3c5d11a3254a89d0199c2c3e43eb51c11c5cc5fab97393d35
- MD5 4c30b5933afb72457281497be2207ab3
- SHA1 aa32d14d31c6db80f852cecd41a801c93d659fc0
- SHA512 f30c4b7d4a29677f9b2e60ff796164ed0f1239754101b7c761070bd8161409277dad1297351987673a21c84e70fb5764367a88819285e52f54541ae361f60c31
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.