Analysis
-
max time kernel
97s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
12-06-2022 18:51
Static task
static1
Behavioral task
behavioral1
Sample
1f2780d6aa6e6076ab9c831b285b5ec486fc9fedac5c1c3a37bbdeea6ca74302.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
1f2780d6aa6e6076ab9c831b285b5ec486fc9fedac5c1c3a37bbdeea6ca74302.exe
-
Size
164KB
-
MD5
37fdb8a53694e2b81305a600a150a639
-
SHA1
6bcd34fb44fa8319ff9496fee2b7d77e1d4b42df
-
SHA256
1f2780d6aa6e6076ab9c831b285b5ec486fc9fedac5c1c3a37bbdeea6ca74302
-
SHA512
f3591de6a15a7881524b2868b5929b99c24ce1374465657f610927fb283b73abe7fd37cd3f6d0745fb22b85053e6241c5a79c389e33ca9aa2a33d5861b4a8608
Malware Config
Extracted
Family
dridex
C2
92.222.216.44:443
69.55.238.203:3389
198.199.106.229:5900
178.254.38.200:884
Signatures
-
Processes:
resource yara_rule behavioral2/memory/4780-130-0x0000000000F70000-0x0000000000F9A000-memory.dmp dridex_ldr