Analysis
-
max time kernel
87s -
max time network
124s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
31-12-2021 06:36
Static task
static1
Behavioral task
behavioral1
Sample
a24919ea7bfce78d50511bac92771d3d.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
General
-
Target
a24919ea7bfce78d50511bac92771d3d.exe
-
Size
653KB
-
MD5
a24919ea7bfce78d50511bac92771d3d
-
SHA1
7d69da083289909d3a440989aa63c8a24ca78bec
-
SHA256
b608e81d6c6a42e1c2f39b484697362ca1a1835b3a13ed878a350841aa9806ae
-
SHA512
6489b0ac981a1dabfd58da56cb74b23fa71713b29cb2e30e0f199a595cf15e2731cf391c95ee24efb409c7fdfbf5b4b1b25e062b885d14e5b2b720ea391347c6
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
103.9.36.172:443
103.70.29.126:593
46.101.175.170:10172
rc4.plain
rc4.plain
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Processes:
a24919ea7bfce78d50511bac92771d3d.exedescription ioc process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA a24919ea7bfce78d50511bac92771d3d.exe