Analysis
-
max time kernel
5s -
max time network
107s -
platform
windows7_x64 -
resource
win7v20210410 -
submitted
24-06-2021 06:02
Behavioral task
behavioral1
Sample
3796236911ffe07b57732455baff51ec.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
General
-
Target
3796236911ffe07b57732455baff51ec.exe
-
Size
1.0MB
-
MD5
3796236911ffe07b57732455baff51ec
-
SHA1
70ab7dde73ab4328fa25d287ae022213725e6da8
-
SHA256
dc36f3eb6ee3a577f9feff86f8c6050b6d655d23c04bed124221fe67702e7165
-
SHA512
13092510fe035d881a4f5e73012765720fbdb8f95d9f3062fc58427d577803798eea8330532143d6b3d3c8db451c6e8479cb16013dc2ea5407548fa7caa22bf7
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
162.243.237.209:443
81.0.236.71:13786
178.79.150.86:4664
rc4.plain
rc4.plain
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Processes:
3796236911ffe07b57732455baff51ec.exedescription ioc process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 3796236911ffe07b57732455baff51ec.exe