Extracted

Extracted

• • Target
    dc6yuusd.exe
  • Size 360KB
  • SHA256 4b1f2c18b149fd0e878c362ffba50bb553d7bea93a795b33e398d032dc0b7663
  • MD5 c966ec47c0480c3a6be2a1231a83c8a1
  • SHA1 b15e12449be1ea174dfd224935fa6d78e1c58f5a
  • SHA512 35b3b6e9aebaa447f2cbf6a9fb7d24985475870285c6ea1bde7b8ccfd3ea956761691e44103d391ec89d8af6f43d73627a09c1c36b19f24caeab1453edd69f5e
  • MD5 SHA1 SHA512

  Score

  10^/10

  smokeloaderbackdoortrojandridex10444botnetcryptoneloaderpacker

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2