Extracted

• • Target
    1-Total New Invoices Monday Dec 14 2020.xlsm
  • Size 57KB
  • SHA256 88b2bb4d5426b3d60dc02ab3c1732108a426d366fa3f4e5d51b2445fd1afa19d
  • MD5 736c49626b1f0738edbcc392eb4f837d
  • SHA1 fa8740fd635de45b3c14040dd929bfe0fd0a27e6
  • SHA512 4adcc5d9ca848c03ec8ef6e67c5f2fcc998beefb1341f470f7ad8ad558e1a44ca9b5722a28222582202448d5d7c06eb29e53b7c1ac0ba3ded0137233f51f1e46
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex10444botnetloader

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Loads dropped DLL

  behavioral1behavioral2