Extracted

• • Target
    Sales_Invoice_186311_725945_from_Inc.xls
  • Size 51KB
  • SHA256 7bb7de3215d3e8a98b95fee746692f710b91da494b80bc7fe73636875dc610b7
  • MD5 e696a3e6497ced315b344d6ab1aa6c5f
  • SHA1 66c6efb7cc4b48bd6e4a14d9edae16bb7e21ffd0
  • SHA512 3879731cb03d4b5d7bc441ca30495cd781cec86205a8fdf6091695598f23974be1c71bbd1e34b17a2989412f5725ef5e7d504ff7c6452014d9e5d3def2dfab61
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex10444botnetloader

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Loads dropped DLL

  behavioral1behavioral2