Extracted

• • Target

    fxses076.jpg

  • Size

    725KB

  • MD5

    aa7ad8fdea021577637b6e0520046686

  • SHA1

    f847d66c48d910ec01127d5e188ceaf4919d418f

  • SHA256

    7a77b516c563c8bbe904af3b90cfb89148b879b807aa34d93be3b1a2eb93a016

  • SHA512

    cd0744f471cbf9fa880ed16dc6d56a55a683f8d85fd5988f6532280c054200a8d83304a4e43d9801325925b81d4532d1cd25a5ec8c476159dc1c53049b9d5e9f

  Score

  10^/10

  dridex10444botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader 'dmod' strings

    Detects 'dmod' strings in Dridex loader.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2