Extracted

• • Target

    5d367a557fb4832d94adb726cac537fc967db49abbcefb41f9dc64b7cd6f4eea

  • Size

    196KB

  • MD5

    65b1f8596a530c3c491846e7d6a75aad

  • SHA1

    823db245fd9d6599269dc0d8be73a6e3a6e1754c

  • SHA256

    5d367a557fb4832d94adb726cac537fc967db49abbcefb41f9dc64b7cd6f4eea

  • SHA512

    19270b5c28b55a33f0a24f762dc66ca5cd8e3dc0cc2e8a14e76c14956fdcafed589ddf2f69cf0cc1e5a106f716f428a22487a77a6e5b4ec534db4cfe0accfdf6

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2