General
- Target 52545ce7c36e648bc9d8e78cde413a0d2b7e45dc4084b28646191f73fe8a010f
- Size 381KB
- Sample210331-c4lxyh8ef2
- SHA256 52545ce7c36e648bc9d8e78cde413a0d2b7e45dc4084b28646191f73fe8a010f
- MD5 d832d70f78937799ed08056442f04442
- SHA1 29d48c7fa4aaa0ff0fe3ed3e10ba5c23cf7f4d80
- SHA512 f40fa2e6459d82fec31c2c7ced0780ff1af8e65625df025e170791fdcf8db4ac6f5aba2e3a914620e883ffbb0916e7c4c9bcfd9ae189454e127af70830d042a9
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
52545ce7c36e648bc9d8e78cde413a0d2b7e45dc4084b28646191f73fe8a010f.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target 52545ce7c36e648bc9d8e78cde413a0d2b7e45dc4084b28646191f73fe8a010f
- Size 381KB
- SHA256 52545ce7c36e648bc9d8e78cde413a0d2b7e45dc4084b28646191f73fe8a010f
- MD5 d832d70f78937799ed08056442f04442
- SHA1 29d48c7fa4aaa0ff0fe3ed3e10ba5c23cf7f4d80
- SHA512 f40fa2e6459d82fec31c2c7ced0780ff1af8e65625df025e170791fdcf8db4ac6f5aba2e3a914620e883ffbb0916e7c4c9bcfd9ae189454e127af70830d042a9
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.