Extracted

• • Target

    16017353e67868fd3b785aa22db51efb_JaffaCakes118

  • Size

    168KB

  • MD5

    16017353e67868fd3b785aa22db51efb

  • SHA1

    c85f9fca75fab04d74bbece3c180f318d55581dd

  • SHA256

    0c262ad9b5f041419149ee032e82abe2f7d06d263de648214c2a484436587d9a

  • SHA512

    ac6e5395d17aa97fd0fd2b7748c7525b139a339b9f86e14a714bc57d193af4c825c0584a446830a3fb51d68687be6f193412bab7d3c86efc5e32836454a56586

  • SSDEEP

    3072:p+rGFFRCMcyzAAykMPqIaXpZYnvf3gx4wblxLSoIm/H2QKGB2gC:p+rGFFlXAAcqj8nHgfOoIdG

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2