Extracted

• • Target
    Copy of Invoice 522967.xlsm
  • Size 159KB
  • SHA256 0186ed5e1eeb88d98e6d8686e0ed26ed76f8dec80ef3fd1bf3f366aac87f44b2
  • MD5 5a1bb3891c09bb59e95f0ff47e8ec3db
  • SHA1 2e1fc20428890f9fca07f995f6095527d90d497e
  • SHA512 093bf618c51152a3e81e6fa5c2b9cefe7697e94c7af38a65bafc90811d1a75791c0a493c4b30ed7e9c9f27c79731c220c35f139b82a477f25977a028c31b08c7
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex111botnetevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2