Extracted

• • Target

    0bcaa3a31fb598a27437bb294a6e34ce138fc3e65adbff2ca7a13799547cd76a

  • Size

    188KB

  • MD5

    c8ed2da280428b796645d8e090708408

  • SHA1

    86b6a23a5b1217ba6782b0f7f36d903f474057b1

  • SHA256

    0bcaa3a31fb598a27437bb294a6e34ce138fc3e65adbff2ca7a13799547cd76a

  • SHA512

    b258bfbc13fa25886ede98a3e69d9a3edfb2f49f0d4ff3c279c5cb6a37d4fc88ad58c7fbdb6005b488a6002220a127d45f6e83b796d3154a936e10edf183b93f

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2