Extracted

• • Target

    g78zqs1w.rar.dll

  • Size

    590KB

  • MD5

    94125438dc1fcccd0c80567f0187718b

  • SHA1

    091d5f6d69be3b52cbe9dc5976092a420ed6cbdd

  • SHA256

    61ec25c0d71e16e8208d3b2ccb2c7f7b9f5580c992e538d256393d8085919560

  • SHA512

    5966b6156c1b3748a56ea0d21d23799a54e5f1579d490224c72ee9645c45cf955b006572057a453c9f586f7ccc8490da704e3bc7c664b048224066df30dd7d76

  Score

  10^/10

  dridex10555botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2