General
- Target bb56d5afc7d00cb06990a05455fdaffd42f98f2b86fba71a282df8d0195ff674
- Size 381KB
- Sample210331-xcrnks4392
- SHA256 bb56d5afc7d00cb06990a05455fdaffd42f98f2b86fba71a282df8d0195ff674
- MD5 d29310c232038a6dd1f2b8749be5619e
- SHA1 2672559728026835fbb5f75a2abf9ef26f5f0815
- SHA512 2c2407fc350e121b9020099a843a1f06aa788558ea8959c89a365336d7d54743a72ea43485ff000b6b077142ebd8c9086db944aab6ad98ca6ab2affebf0857dd
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
bb56d5afc7d00cb06990a05455fdaffd42f98f2b86fba71a282df8d0195ff674.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target bb56d5afc7d00cb06990a05455fdaffd42f98f2b86fba71a282df8d0195ff674
- Size 381KB
- SHA256 bb56d5afc7d00cb06990a05455fdaffd42f98f2b86fba71a282df8d0195ff674
- MD5 d29310c232038a6dd1f2b8749be5619e
- SHA1 2672559728026835fbb5f75a2abf9ef26f5f0815
- SHA512 2c2407fc350e121b9020099a843a1f06aa788558ea8959c89a365336d7d54743a72ea43485ff000b6b077142ebd8c9086db944aab6ad98ca6ab2affebf0857dd
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.