Extracted

• • Target

    ebb8164bc266bee533cb0ca2c05663e78a45b566630e5c883f51dd3cfd172bbe

  • Size

    188KB

  • MD5

    b642caf5543408fa97399cbb791c8703

  • SHA1

    c3d716ffe212ea56ffb9aaa41e4e92784ea81309

  • SHA256

    ebb8164bc266bee533cb0ca2c05663e78a45b566630e5c883f51dd3cfd172bbe

  • SHA512

    220525b57a951f937a59dde47ff151e4775f817d7034f984862a28cd02205df7f67d0f9038f65cf873f62ce4cc018a0feb71443989da1b02468ebf08bbfb3fe0

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2