General
Static task
static1
URLScan task
urlscan1
Sample
http://popcash.net/world/go/286361/586996
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
45.63.36.79:8194
45.79.80.198:9676
81.223.127.86:10172
rc4.plain
rc4.plain
Targets
-
-
Target
http://popcash.net/world/go/286361/586996
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-