Extracted

• • Target

    jcpi927p.tar

  • Size

    377KB

  • MD5

    df5d80b77f4c8cb272aff888d554a000

  • SHA1

    7180b2fb5396a12e3d40b00c43ef8934c5754f87

  • SHA256

    2f956a58f051e34a280d84a36e8589fea9a9b52d3973ce7c4af5961b8d4e1d96

  • SHA512

    15973a0c3c74ea285e66ce9e7c59b68eddd5f7a083d2421108d5d546f348ce101d1dadce4499c9f57ca09e39721626512c0e86f9b4a4f54fbef34d1c0bdad208

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2