Extracted

• • Target

    be5ed54f79918f5293e54b60f9ac7db0_JaffaCakes118

  • Size

    608KB

  • MD5

    be5ed54f79918f5293e54b60f9ac7db0

  • SHA1

    89df1f52f7d466a3b4a1fa83f8c77428c7eb76b8

  • SHA256

    42ed38ad7023327d24d68bf10ff1fad5841c8b95512bbb367d67be7b7769b914

  • SHA512

    cd90838d042a18acc739ce7ba3048b4563a321f8f1c4e7c52393d8354f262044131025ef354dcf40e1bcd765e4fbd79f60f5b9c4ecfad44ad1179e7e7b97f272

  • SSDEEP

    12288:dZGQdqOG5lJqydLqQSeCqsVK8kPRGO35N9mVZzXc6:dZ0fWjeCVVK8kP9N9oV

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2