Extracted

• • Target

    0934452ffd931838dbebc97b6dd3f7c395551e23e54b679fd0700c15367e2b1c

  • Size

    639KB

  • MD5

    b950706dc9120d8b5c8f94478d7a87ec

  • SHA1

    7565f8e61421ef2ab1554f8570075fb1c12ed6f5

  • SHA256

    0934452ffd931838dbebc97b6dd3f7c395551e23e54b679fd0700c15367e2b1c

  • SHA512

    29a7f20ea678f91eee476764c1a5fc3fc92c8f9caaaa46f86a38f24aaa551d66d17ce8482a380ddf9e49b2e06bdda3abaa609e627aed49d6d2b49bef0e42c2ea

  Score

  10^/10

  dridex10444botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2