Extracted

• • Target

    1f4f8c28e684d5db5ce22f7742826700_JaffaCakes118

  • Size

    248KB

  • MD5

    1f4f8c28e684d5db5ce22f7742826700

  • SHA1

    282a9257541437dbc586d4f953f4092f96dccaaa

  • SHA256

    3fde380555135b231bdff61f8ff4a28169e4df0c6b9eab4378cbf50160f3a235

  • SHA512

    5fc8d07c066114dbf1af31e0774c3c8a8a8c39c44be9b12bf28282f1daa7aa02fa335397620c3a27c3a49751983497ae656712f01be393871b359d5404949af9

  • SSDEEP

    6144:SSaBi2ZFUOnhD8mc3oOpvXZ26u/6mv5gdC:SXRZHnhvfOpvXUx/6cgdC

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2