Extracted

• • Target

    9c3e327c612a7837cb64f76e343f08bf572dced5dbc663f2efcc4e4c9d4eb13c

  • Size

    196KB

  • MD5

    255fbf3507a9f3683cd2f2cce7f239ea

  • SHA1

    6ab18898a66be59f9fe4c1309f4945d9220dff1b

  • SHA256

    9c3e327c612a7837cb64f76e343f08bf572dced5dbc663f2efcc4e4c9d4eb13c

  • SHA512

    f096c15b23ad15349dfdeebb1f7d84bf7584b0b39ff78806ba2b90e58f62493fb986d1f5dbde9d50f59171c7d60d8b6f6d53358187f020e87ccb440b917449cc

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2