Analysis
-
max time kernel
122s -
max time network
139s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
13-01-2022 16:54
Static task
static1
General
-
Target
dridex.exe
-
Size
653KB
-
MD5
a5eb3426e582795b6393a328cd27bf94
-
SHA1
a2494b972f175cadc7e3b43d67af4c7f7efebb19
-
SHA256
67dd305f6e4cdfaa395ca06f30d971b8a0d4bf3926bfb140b258f0704b31f92b
-
SHA512
39ede402f550cd8fbea9c54ded315cb7a3f79bdec7807b71e285068dee125e702b9af4f1877e3bd0b8bdcabb632d2abe0057f8632d1565e0f6cdee48f4a7cfac
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
103.9.36.172:443
103.70.29.126:593
46.101.175.170:10172
rc4.plain
rc4.plain
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Processes:
dridex.exedescription ioc process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA dridex.exe