General
- Target 2a7d98e350c431dcce79966d10ed36236a0fa0dfa113cec0d629ddb3faa43be2
- Size 377KB
- Sample210331-vg8fvn89e2
- SHA256 2a7d98e350c431dcce79966d10ed36236a0fa0dfa113cec0d629ddb3faa43be2
- MD5 30f8b838c42d34b524ca7e16c259dce7
- SHA1 89d75c516d3eb872197fd35f94cd85130536a98d
- SHA512 35b0cb4f23091a65629c29e3475dd9e31b76c71282f78f3fa88157885283e07742e7dd7a2cdcb2f1c338caec81f6540584c88ba5325ad78925738a954a603a62
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
2a7d98e350c431dcce79966d10ed36236a0fa0dfa113cec0d629ddb3faa43be2.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target 2a7d98e350c431dcce79966d10ed36236a0fa0dfa113cec0d629ddb3faa43be2
- Size 377KB
- SHA256 2a7d98e350c431dcce79966d10ed36236a0fa0dfa113cec0d629ddb3faa43be2
- MD5 30f8b838c42d34b524ca7e16c259dce7
- SHA1 89d75c516d3eb872197fd35f94cd85130536a98d
- SHA512 35b0cb4f23091a65629c29e3475dd9e31b76c71282f78f3fa88157885283e07742e7dd7a2cdcb2f1c338caec81f6540584c88ba5325ad78925738a954a603a62
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.