Extracted

• • Target

    dcbl8fi.zip

  • Size

    576KB

  • MD5

    abf64911eb9dd3ca980ca660712567bd

  • SHA1

    3465929617850b18d612f407e280af28cca72286

  • SHA256

    c7f410926c4fe17c41e37d581b9d6908582eb821075ba7d4a20f58161ef154a7

  • SHA512

    77a321b6b26a5f4a83c87cd56a27e185ac4d880240f6cf747e256898c023475af47cd66f121fbae0996063ad42676f731c8baee803eb41502a50d53b4bf1bc21

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2