Extracted

• • Target

    2ad88b77551488cce9e7b33a6f6af6bc_JaffaCakes118

  • Size

    920KB

  • MD5

    2ad88b77551488cce9e7b33a6f6af6bc

  • SHA1

    3ffe54dd18132fb8fae311c5c6d7ce0250ff5cef

  • SHA256

    b6bd8479ef5943eaf26efdcda11ab09bf0569ad2295ba905fc0901511ca7c286

  • SHA512

    5500d544187da7d097f91297d9c86350aca2a36ec82ff6652b1fb95ae7e89e1862c27545c86ec41166237ee9abd66374c5bd4a39a5a0ef16340d004dda45d982

  • SSDEEP

    24576:ftWfnaVoffEQmyO378WTkvEKT9Hgce1BHbonCm:luaq34yDWTkvvT9HgdbonC

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2