Extracted

• • Target

    a5e2d29f8f64f5e22ed3057945aca32aa507e38fc7a25ca497fe0d1a34f3caa0

  • Size

    188KB

  • MD5

    9facd780bc8ac53958e8ceecb0805cf4

  • SHA1

    7050f7660afa9496139010fcd556632c9c1af216

  • SHA256

    a5e2d29f8f64f5e22ed3057945aca32aa507e38fc7a25ca497fe0d1a34f3caa0

  • SHA512

    a2884d523dd36662a094c7db91b33994c4adaa6cc166259f632fed218cc6a885fd05b801ad5afb4567716e3247c87f3f6c09b1d63931b168632433703f2dd6b6

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2