Extracted

• • Target

    necurs

  • Size

    1008KB

  • MD5

    6e05e84c7a993880409d7a0324c10e74

  • SHA1

    4cac8146d54c5e47ec1c31a04c3cafdec9fbf209

  • SHA256

    ffb1150bbb28d53f325b00445be935cd657c1d8061ba73e91af5b343b6c0d438

  • SHA512

    4a4fa48ce31abea8cab4ca176f9d5be4b1b9b9c45c574f2e3605eaf04fd2fbd3da37d464300b2954623b0b9d377cff0a47d082b7fc1cc82a6d3eeab87555d43a

  • SSDEEP

    24576:XiB1Q0SPpqqUGB9Qe5k04Q9RGuRUEy3FKEdeybpk/w:XJ/PMq3B9Qet1pyVbNbGo

  Score

  10^/10

  dridexbotnetevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2