General
- Target 5f21e05769f21a0664fa7a630c02b8a82a3fbd80bc36ade66838005f52ba38da
- Size 377KB
- Sample210331-bmdt2hvzfs
- SHA256 5f21e05769f21a0664fa7a630c02b8a82a3fbd80bc36ade66838005f52ba38da
- MD5 6c956f9cf93e91baff2f08bd72b735f0
- SHA1 6c9c1a2ca0f3c328023d7f4320712bc8badf1f75
- SHA512 df6056d52b942c95451b65c53957db250f306d582b01cbac19d5c1339a3edbb9a963d71127f9769f25b4e94fb0b591bc4be43eaf306ec291dd62fa2d07544e46
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5f21e05769f21a0664fa7a630c02b8a82a3fbd80bc36ade66838005f52ba38da.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target 5f21e05769f21a0664fa7a630c02b8a82a3fbd80bc36ade66838005f52ba38da
- Size 377KB
- SHA256 5f21e05769f21a0664fa7a630c02b8a82a3fbd80bc36ade66838005f52ba38da
- MD5 6c956f9cf93e91baff2f08bd72b735f0
- SHA1 6c9c1a2ca0f3c328023d7f4320712bc8badf1f75
- SHA512 df6056d52b942c95451b65c53957db250f306d582b01cbac19d5c1339a3edbb9a963d71127f9769f25b4e94fb0b591bc4be43eaf306ec291dd62fa2d07544e46
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.