Extracted

• • Target

    se12y5vmexe.exe

  • Size

    311KB

  • MD5

    7750ba949e4b090260827a4d8be63efc

  • SHA1

    ee0e268bfa0e49591dcf77f32d7da94515d03c82

  • SHA256

    8521e047f78ccf64777d40e44fb86a95f900e0ed594bb4f01cc6802ff412c536

  • SHA512

    464c3ac243bb8b3bad6419d10d5c9112dbb658e13256b722325bb42bcb11c464192683cb814568ecb431bf28aa3b58cbd7061f8c273b5ee3ac700948876eb315

  • SSDEEP

    6144:WH9O040SSrnmrwc4oU2FmrEaoGAC+Y5H2V3B918juwN:i9O02Srnh0qEJC+Y218jdN

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2