General
- Target ff84db97d4601c0c3263177bd5cac27f4ac9b8425d8b4966bf81d1caeda358e9
- Size 377KB
- Sample210331-t4gabyx7vn
- SHA256 ff84db97d4601c0c3263177bd5cac27f4ac9b8425d8b4966bf81d1caeda358e9
- MD5 bd176f1c5366ddd0cc4d202f50a41280
- SHA1 513c129bfb05e681d64728cb607cae2547612f7f
- SHA512 4267f111e9ef4abebe9d61aac2c8c4d93809c19fd22f744eb0dfef00657b586dfac3078ab15aedd3a82b6c34f734bb90150d5b34a6c1e8dc5973ab040e3becce
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
ff84db97d4601c0c3263177bd5cac27f4ac9b8425d8b4966bf81d1caeda358e9.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target ff84db97d4601c0c3263177bd5cac27f4ac9b8425d8b4966bf81d1caeda358e9
- Size 377KB
- SHA256 ff84db97d4601c0c3263177bd5cac27f4ac9b8425d8b4966bf81d1caeda358e9
- MD5 bd176f1c5366ddd0cc4d202f50a41280
- SHA1 513c129bfb05e681d64728cb607cae2547612f7f
- SHA512 4267f111e9ef4abebe9d61aac2c8c4d93809c19fd22f744eb0dfef00657b586dfac3078ab15aedd3a82b6c34f734bb90150d5b34a6c1e8dc5973ab040e3becce
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.