General
- Target 54d9c19915996cd9cf3f452987abfdd640ddd074bc6afb88546ea4e411bf4e68
- Size 381KB
- Sample210331-syg1jsnfs6
- SHA256 54d9c19915996cd9cf3f452987abfdd640ddd074bc6afb88546ea4e411bf4e68
- MD5 b43cfaa13ec81c2e07c2a01fa3c296be
- SHA1 14c38317d7ba59499b7361edd01f5f52cc73928d
- SHA512 4554cc51a3859aa03efdac0b6c362c990f7f642256908d899d01c31673c825b6833b491cefd62a48e16cb42ffd5edec349e8c59b3241f01e4929eacf618b9633
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
54d9c19915996cd9cf3f452987abfdd640ddd074bc6afb88546ea4e411bf4e68.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target 54d9c19915996cd9cf3f452987abfdd640ddd074bc6afb88546ea4e411bf4e68
- Size 381KB
- SHA256 54d9c19915996cd9cf3f452987abfdd640ddd074bc6afb88546ea4e411bf4e68
- MD5 b43cfaa13ec81c2e07c2a01fa3c296be
- SHA1 14c38317d7ba59499b7361edd01f5f52cc73928d
- SHA512 4554cc51a3859aa03efdac0b6c362c990f7f642256908d899d01c31673c825b6833b491cefd62a48e16cb42ffd5edec349e8c59b3241f01e4929eacf618b9633
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.