Extracted

• • Target

    982c442df8c37a47c5d360b0dfc6c533aa76189ab63ded7bf2d5e04ef247a5d5

  • Size

    188KB

  • MD5

    b529a485983d540e9a43d004785ab463

  • SHA1

    42009c5552c2a9db0b1e27768b92f8e77cd406fe

  • SHA256

    982c442df8c37a47c5d360b0dfc6c533aa76189ab63ded7bf2d5e04ef247a5d5

  • SHA512

    3ab461daeb370c3a602344538711477cc86900268e88551857cd96147170045ec7709c04ac29c30ee14b28cf570f2ff2f1aa818c759ee2b46c292dfdcc8babc3

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2