Analysis
-
max time kernel
118s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
24-07-2022 15:32
Static task
static1
Behavioral task
behavioral1
Sample
8a24f75188b63723ee4d0dd65e40282723971e42687eaa03e6800e2a4435f0f7.exe
Resource
win7-20220715-en
windows7-x64
2 signatures
150 seconds
General
-
Target
8a24f75188b63723ee4d0dd65e40282723971e42687eaa03e6800e2a4435f0f7.exe
-
Size
343KB
-
MD5
e864ff56570b9ab3f640779e1dfda3f2
-
SHA1
f9a0892ac08115e0876e1e7cabc89369a963a53c
-
SHA256
8a24f75188b63723ee4d0dd65e40282723971e42687eaa03e6800e2a4435f0f7
-
SHA512
4138eb77fe76832d218d63c9102200528a83e8b4027e7838eceae199f6af2d4f388fe0c51987d18f088ac1cc6632d4f0caa570866920283bdd912c48de2a43a0
Malware Config
Extracted
Family
dridex
C2
46.105.131.75:443
198.61.168.254:443
69.55.238.203:3389
198.199.106.229:5900
178.254.38.200:884
Signatures
-
Processes:
resource yara_rule behavioral2/memory/4388-130-0x0000000000660000-0x00000000006B6000-memory.dmp dridex_ldr