General
-
Target
ugm5wtx2gif
-
Size
539KB
-
Sample
201118-7dcwhyfc96
-
MD5
6972a8146a738570e6443ba8b75af1bb
-
SHA1
480043a771ac2bdde19b0177a0f7ce5db428e8c7
-
SHA256
ae9628344dfef9e22d8bb19fd5001329640ec5573c5503e3ae99788ef7b58f1c
-
SHA512
4120227d0fd105d3e7a28a39f151036121ce84ed78cd7a846f133c7ea4e47fc58cf0f102d1e6ba1dc97fcff318597e3d77548822384c4c2603680dacac809f35
Behavioral task
behavioral1
Sample
ugm5wtx2gif.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
10444
162.241.44.26:9443
192.232.229.53:4443
77.220.64.34:443
193.90.12.121:3098
Targets
-
-
Target
ugm5wtx2gif
-
Size
539KB
-
MD5
6972a8146a738570e6443ba8b75af1bb
-
SHA1
480043a771ac2bdde19b0177a0f7ce5db428e8c7
-
SHA256
ae9628344dfef9e22d8bb19fd5001329640ec5573c5503e3ae99788ef7b58f1c
-
SHA512
4120227d0fd105d3e7a28a39f151036121ce84ed78cd7a846f133c7ea4e47fc58cf0f102d1e6ba1dc97fcff318597e3d77548822384c4c2603680dacac809f35
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-