Extracted

• • Target

    1cfba0904f4423463f764a11a6fd4251_JaffaCakes118

  • Size

    920KB

  • MD5

    1cfba0904f4423463f764a11a6fd4251

  • SHA1

    a00c004b4de481c921c5ad2c98dcd87724b4b0a1

  • SHA256

    30b6438b14eac5337f6d0f81997a4fce356611fc19155ae3650d5df21e894e74

  • SHA512

    cc902fe1d2206b0f584fe3c0ba3874db4189a4f226da4c54a2a632deb719bb3d58cf934b467c58ad2d0ffcdd2672aef96b79e118c17a067d05ead2e4a3879a5f

  • SSDEEP

    24576:bwWfnaVoffEQmyO378WTkvEKT9Hgce1BHboDCm:cuaq34yDWTkvvT9HgdboDC

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2