Analysis
-
max time kernel
120s -
max time network
172s -
platform
windows7_x64 -
resource
win7v20210410 -
submitted
06-07-2021 05:32
Static task
static1
Behavioral task
behavioral1
Sample
7425d5f4f1967fd02b05dabd91c8fd2a.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
General
-
Target
7425d5f4f1967fd02b05dabd91c8fd2a.exe
-
Size
1.1MB
-
MD5
7425d5f4f1967fd02b05dabd91c8fd2a
-
SHA1
9da79c5cd6a88888ea6d486e35a9ae51385239fb
-
SHA256
eb038969c60d9ec7d12285601f108484afaf40d78c495d86d1c24292e99776d9
-
SHA512
7b01577c3ac023a1087e34b3de78af835260b48dbb60c07068767d80aabdeefcbdbb156541c18c0d9fc1259bab988b9a94ff0493037223e6ef7ea986d62cd698
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
138.197.133.25:443
172.105.110.194:4664
51.75.77.27:13786
rc4.plain
rc4.plain
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Processes:
7425d5f4f1967fd02b05dabd91c8fd2a.exedescription ioc process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 7425d5f4f1967fd02b05dabd91c8fd2a.exe