Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
17-04-2024 13:06
Static task
static1
Behavioral task
behavioral1
Sample
4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
General
-
Target
4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115.exe
-
Size
241KB
-
MD5
e614a69d706913376ab2bb20a703dcf5
-
SHA1
3a83bb68be29e1f18fc9d328d952fd228abfae2a
-
SHA256
4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115
-
SHA512
dd22042b471b608b7a52d531d3b690d35cbe684333cd88c55709b6b562f81d3c02e866ad95fb4e6d62908005cd9e5ae01e88d3c86346ce0c2c156036b72b77ec
-
SSDEEP
3072:KWiPOo14wwI606CzpJEPlp+K2b1WvAUQdk5m84D2KQdXtvkDqW0TrHbed2rT2pN8:KWdEj6rapJEPr11AXdQm84Dr0OOPSR4
Malware Config
Extracted
Family
dridex
C2
198.61.168.254:443
51.255.165.160:3389
209.126.105.6:884
Signatures
-
Processes:
resource yara_rule behavioral2/memory/1456-0-0x0000000000070000-0x00000000000AC000-memory.dmp dridex_ldr behavioral2/memory/1456-3-0x0000000000070000-0x00000000000AC000-memory.dmp dridex_ldr