Extracted

• • Target

    25a29c0c7d80fb7510d0bd474723873a641052a1183bde6e50fd72b199143c6f

  • Size

    188KB

  • MD5

    13c1ff88062e5008c445ada265b14922

  • SHA1

    997d8707e86cd74d4316a9bc527097161d77f3d7

  • SHA256

    25a29c0c7d80fb7510d0bd474723873a641052a1183bde6e50fd72b199143c6f

  • SHA512

    d96c0f0f876c4f1751fcc7a147e08de584bc41f0427acd0b3729be9b87fcfa4d554533e696a705b88945e50a4b99c1089b227e8a15360f59749e408f6b4d7702

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2