Extracted

• • Target

    930796d85a470ba941c56ae850f9f5a17cbf5ca5d724b9741bc73f8925397353

  • Size

    196KB

  • MD5

    e3ecdd91feb8212f43674879b0a81a2a

  • SHA1

    30e7c63ef94654342ac654a23061930cf2d68cb8

  • SHA256

    930796d85a470ba941c56ae850f9f5a17cbf5ca5d724b9741bc73f8925397353

  • SHA512

    9f60f3c7d68c4d5a96fc2014510234220394a80617c076bcfa552c52992ff584266bd1a956a242418a69e167c43a72351483cf4f023ca709d83c69902a3fd1d3

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2