Extracted

Extracted

• • Target
    Gift_Card_209788849.doc
  • Size 112KB
  • SHA256 e20dadb65651d81743aae5451f4f63d6fd7a7da48d4bf71af247a033ac46ee11
  • MD5 d1cf7f50f8414d437acb4f026528909e
  • SHA1 56811440234742e6b7617685e0dee6a1f4034dfe
  • SHA512 bb14b8816ab2ab8f44d5299e33576ca32ff717eeb5754452f724d59c61293c08f74cd085a890192ca89944809c402b82470917e1f07309879c2e2da7ba052ade
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex10555botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan

  • Drops file in System32 directory

  behavioral1behavioral2