Extracted

• • Target
    Report-24Sept.2020.scr
  • Size 734KB
  • SHA256 fad001d463e892e7844040cabdcfa8f8431c07e7ef1ffd76ffbd190f49d7693d
  • MD5 d594e8a2098a81c9bfa24f3c17c992e6
  • SHA1 b9c820973407c7b4bef5b9ce98b7af62cafa397d
  • SHA512 50049d1ded3f8cfcb6aa839c0341e91bb39b46dbd5376533f2725ce27e6ae5059d3f5af71100dd025b03b7a3cf90bfa920a93818ac1bafb30c65460514c4fd47
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex10555botnetevasionloaderransomware

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Executes dropped EXE

  • Sets file to hidden

    Modifies file attributes to stop it showing in Explorer etc.

    evasion

  • Loads dropped DLL

  • Enumerates physical storage devices

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    ransomware
  behavioral1behavioral2