Analysis
-
max time kernel
50s -
max time network
71s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
15-04-2022 02:02
Behavioral task
behavioral1
Sample
73a2d5745c9e8ba2c965855f3043bfacfb4081292fee5bf3faa40a9b7d0b3cf9.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
73a2d5745c9e8ba2c965855f3043bfacfb4081292fee5bf3faa40a9b7d0b3cf9.exe
-
Size
364KB
-
MD5
a5afc2400de4b22c4e5b8ff2d0e20e82
-
SHA1
0c55dedc11b36e9eb235e9a66b69dc3b8a79d540
-
SHA256
73a2d5745c9e8ba2c965855f3043bfacfb4081292fee5bf3faa40a9b7d0b3cf9
-
SHA512
781b9dd298356190eedc5d60550bfa708a6d69a240c9017137a959c839af15de6845800e1f3a882855eeaded78b5d0de4390751dc8f6096f86a6c3fc4ce419ca
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
194.150.118.7:443
49.212.179.180:3889
69.64.62.4:4443
rc4.plain
rc4.plain
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Processes:
73a2d5745c9e8ba2c965855f3043bfacfb4081292fee5bf3faa40a9b7d0b3cf9.exedescription ioc process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 73a2d5745c9e8ba2c965855f3043bfacfb4081292fee5bf3faa40a9b7d0b3cf9.exe