General
- Target 2092-0-0x0000000074DC0000-0x0000000074DF1000-memory.dmp
- Size 196KB
- Sample240725-bykxcszerq
- SHA256 d4afa27a8c2acbaa60bba23703115eea2c20a97f5d0a2ee9b40cccf03d98a6b4
- MD5 a47fb92b00b3efd0d24924a5b7f0adea
- SHA1 19f12bf42403db4896fed755fe236cf6e7042386
- SHA512 21e4aef0dde9467edd967dfebbfe75f2c52f6c2ba809e6f0e120ca3f889ab5817efee888f4791271266549f36f413eeb2062f1abcc570c9908569729bc8e8e9e
- SSDEEP 1536:DMncf+Xcjqn7ZnI6r2j+WKbmnICE2dUL9V1OFeuPcazfKhvzzG5AsfdLC3f:SvXzFjC+XSn837S5ihLa5Aqd8f
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2092-0-0x0000000074DC0000-0x0000000074DF1000-memory.dll
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2092-0-0x0000000074DC0000-0x0000000074DF1000-memory.dll
Resource
win10v2004-20240709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
dridex
Botnet
-
111
C2
-
209.151.236.42:443
-
91.121.94.86:8172
-
5.189.144.136:6516
rc4.plain
rc4.plain
Targets
-
- Target 2092-0-0x0000000074DC0000-0x0000000074DF1000-memory.dmp
- Size 196KB
- SHA256 d4afa27a8c2acbaa60bba23703115eea2c20a97f5d0a2ee9b40cccf03d98a6b4
- MD5 a47fb92b00b3efd0d24924a5b7f0adea
- SHA1 19f12bf42403db4896fed755fe236cf6e7042386
- SHA512 21e4aef0dde9467edd967dfebbfe75f2c52f6c2ba809e6f0e120ca3f889ab5817efee888f4791271266549f36f413eeb2062f1abcc570c9908569729bc8e8e9e
- SSDEEP 1536:DMncf+Xcjqn7ZnI6r2j+WKbmnICE2dUL9V1OFeuPcazfKhvzzG5AsfdLC3f:SvXzFjC+XSn837S5ihLa5Aqd8f
- MD5 SHA1 SHA512 SSDEEP
Score3/10