Analysis
-
max time kernel
49s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20220722-en -
resource tags
arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system -
submitted
25-07-2022 02:36
Static task
static1
Behavioral task
behavioral1
Sample
934dc7b00f858f96da7701a0be0637db1a4c7a06eaa3f2c59a7a8fa1a25ba995.exe
Resource
win7-20220718-en
windows7-x64
2 signatures
150 seconds
General
-
Target
934dc7b00f858f96da7701a0be0637db1a4c7a06eaa3f2c59a7a8fa1a25ba995.exe
-
Size
200KB
-
MD5
9429eae6bd7e79fce12d2a756900d5d1
-
SHA1
9e3a162261433f748a7d31a533fcbf96c934aa21
-
SHA256
934dc7b00f858f96da7701a0be0637db1a4c7a06eaa3f2c59a7a8fa1a25ba995
-
SHA512
6ddbf9912cdeaf4c01b5aaabbeee805b2c92eb01b447dfb89b1ad87d31ac48511a629478685535975636f185d4a32aede20e58d8ff7edf9b0379f87c5324f4a2
Malware Config
Extracted
Family
dridex
C2
94.23.53.34:443
5.39.91.110:691
5.133.242.156:170
217.16.188.20:170
Signatures
-
Processes:
resource yara_rule behavioral2/memory/4404-132-0x00000000017B0000-0x00000000017E2000-memory.dmp dridex_ldr