Extracted

Extracted

• • Target

    Inv_26726_06464.xlsm

  • Size

    54KB

  • MD5

    b403bcb2e1902f9851753976c5e6c3a7

  • SHA1

    845932e0c3c0b743f5fb5eb56d3e056706ab91d6

  • SHA256

    7ce03706ca499ae052de8bdaf9181f4f059cae19fd22fd52a902e2fcdb27f32e

  • SHA512

    30367dc639491a990ea5c7e9ec2adbbb19f305fe6157c35a0b4a0f974cb8151fabdf3ff3f1a99603f73191fbe4676cf9f29e132558aac881a776ba3d796a7436

  Score

  10^/10

  smokeloaderbackdoortrojandridex10444botnetcryptoneloaderpacker

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2