General
- Target 0aedf995ba27ea387f28090ebda110ec4394b35e1aa33ea2ea6031af7c6d0949
- Size 377KB
- Sample210331-4awr6lmll2
- SHA256 0aedf995ba27ea387f28090ebda110ec4394b35e1aa33ea2ea6031af7c6d0949
- MD5 a68980c620d276184f14e65d5c5eaea6
- SHA1 e0091293dff8aa819db9989e6c8a2a8ee3a7282c
- SHA512 8be2f3d7dd9947cee05f29b279762371b21d484baf4d9b5469433ff2738ef570556a3b490b6da09f9080359ea16b1468ac99f00bb93a4e07798236a186deaf66
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
0aedf995ba27ea387f28090ebda110ec4394b35e1aa33ea2ea6031af7c6d0949.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target 0aedf995ba27ea387f28090ebda110ec4394b35e1aa33ea2ea6031af7c6d0949
- Size 377KB
- SHA256 0aedf995ba27ea387f28090ebda110ec4394b35e1aa33ea2ea6031af7c6d0949
- MD5 a68980c620d276184f14e65d5c5eaea6
- SHA1 e0091293dff8aa819db9989e6c8a2a8ee3a7282c
- SHA512 8be2f3d7dd9947cee05f29b279762371b21d484baf4d9b5469433ff2738ef570556a3b490b6da09f9080359ea16b1468ac99f00bb93a4e07798236a186deaf66
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.