General
- Target 344b0c9513004b3db07f3ffb46ec8fa975f1b980fec9654bf4cbe1782cfcc4f4
- Size 864KB
- Sample210325-wn7c6ee93s
- SHA256 344b0c9513004b3db07f3ffb46ec8fa975f1b980fec9654bf4cbe1782cfcc4f4
- MD5 cd0149d0935c2044528d4a31b64fdceb
- SHA1 453c15573be67d2a793d6c2fd2f002cb76c6e64a
- SHA512 76bf0e4803ea54e12dfc0d0e390de793fbb55ea83a05f52fdd2074b2dfcab12422b8e53cfda3812a5e58610a40eb3e4ebb3fe7d6a2a015f015238fd104a6875b
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
344b0c9513004b3db07f3ffb46ec8fa975f1b980fec9654bf4cbe1782cfcc4f4.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.192:443
-
103.6.213.203:6601
-
46.41.130.218:2303
rc4.plain
rc4.plain
Targets
-
- Target 344b0c9513004b3db07f3ffb46ec8fa975f1b980fec9654bf4cbe1782cfcc4f4
- Size 864KB
- SHA256 344b0c9513004b3db07f3ffb46ec8fa975f1b980fec9654bf4cbe1782cfcc4f4
- MD5 cd0149d0935c2044528d4a31b64fdceb
- SHA1 453c15573be67d2a793d6c2fd2f002cb76c6e64a
- SHA512 76bf0e4803ea54e12dfc0d0e390de793fbb55ea83a05f52fdd2074b2dfcab12422b8e53cfda3812a5e58610a40eb3e4ebb3fe7d6a2a015f015238fd104a6875b
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.