General
- Target 4edb85bc25603bb33ddfec00d3258176ea15a736b566b01c298269333bf2b445
- Size 377KB
- Sample210331-ykgnspyz42
- SHA256 4edb85bc25603bb33ddfec00d3258176ea15a736b566b01c298269333bf2b445
- MD5 3166c9e87dda1f896a7e2a1894ba279d
- SHA1 9457528c9fe39e48f7cc5b7b0b67881bb6ec1b1a
- SHA512 a0f0f2e69f70ae926de1701df57ab14ad40a4b1d8e15c8e00fb84adec14eb540d66ed191ddad3b4816e2634f7c6c49be108865896083e6673cae37d9506e6961
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
4edb85bc25603bb33ddfec00d3258176ea15a736b566b01c298269333bf2b445.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
131.100.24.215:443
-
210.65.244.174:6601
-
195.201.199.53:2303
rc4.plain
rc4.plain
Targets
-
- Target 4edb85bc25603bb33ddfec00d3258176ea15a736b566b01c298269333bf2b445
- Size 377KB
- SHA256 4edb85bc25603bb33ddfec00d3258176ea15a736b566b01c298269333bf2b445
- MD5 3166c9e87dda1f896a7e2a1894ba279d
- SHA1 9457528c9fe39e48f7cc5b7b0b67881bb6ec1b1a
- SHA512 a0f0f2e69f70ae926de1701df57ab14ad40a4b1d8e15c8e00fb84adec14eb540d66ed191ddad3b4816e2634f7c6c49be108865896083e6673cae37d9506e6961
- MD5 SHA1 SHA512
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.