Extracted

• • Target

    tplrwbs.tar

  • Size

    1.0MB

  • MD5

    8862af832648036583401dc684dfb37e

  • SHA1

    303a5bb159021e54fac7ede1951ee77d3506cf7e

  • SHA256

    50dc4263f4b99b452d70aba39f86e2c50cb11c0948488b001aefe61dc7069593

  • SHA512

    78df17ff6609053ecec51cad8035c4ea767dcb1339c77029f689e2177cdc6ae7441c92146adbacea3904b8e66610629292d35e803ad044b8486d337560cdfb46

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2