Behavioral task
behavioral1
Sample
280-56-0x00000000753E0000-0x000000007545D000-memory.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
280-56-0x00000000753E0000-0x000000007545D000-memory.dll
Resource
win10v2004-20220812-en
General
-
Target
280-56-0x00000000753E0000-0x000000007545D000-memory.dmp
-
Size
500KB
-
MD5
16d54db2e33e731a35a82434c42f60a4
-
SHA1
e229f9b722a194d91e031cbba49414097ff69e97
-
SHA256
3b65967478381324e0ca26ee6dad3c1437622a18f2a18a9c466293b7197e0b96
-
SHA512
6e7953a590611f0226b2b9a9c48a414e8e654de1c14fffb11a1e7002f2a52d33873f61554e2b9b70d33f602950edf27c80b9936b30cd8b29b8415c09a646344f
-
SSDEEP
3072:0Ls6GOhkfm9k9H1x8Lxq6im8DqM4ozD8iP:0Ls6NhkCG78L7iqM78
Malware Config
Extracted
dridex
22202
51.83.47.27:443
82.98.180.154:6602
159.65.88.10:4664
91.121.146.47:10443
Signatures
Files
-
280-56-0x00000000753E0000-0x000000007545D000-memory.dmp.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ