Extracted

• • Target

    0ba77498243b224243f4009adf9dee774cb05e0d353d540267f3e97ec457855f

  • Size

    196KB

  • MD5

    0527df31a890f89f53f12a66749b4b91

  • SHA1

    f9a21825074888a1508f39fc6fffc10a939de99f

  • SHA256

    0ba77498243b224243f4009adf9dee774cb05e0d353d540267f3e97ec457855f

  • SHA512

    fecd3a5d9979de1e060cb9da7662980687eecf0fae8faae7e7905a8d6c8e4b7473ff3756625069a84c4c9846d4e8bd0b7cc4baefacd2cd8d470f90fbe5753ca0

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2