Extracted

• • Target

    4ee129a17d4714d96f9a56e5f5aeb49f_JaffaCakes118

  • Size

    785KB

  • MD5

    4ee129a17d4714d96f9a56e5f5aeb49f

  • SHA1

    49d6323987c01c2b887101ff493b510229e17428

  • SHA256

    120c3c37af1672c02ce61d7a64795e9cf44146a6e753e5d889c3bfa360d6cd2d

  • SHA512

    f0c845e941b7af77db60447c4e04a0a693e5327f58baff19fa9da2fcc28eecf18743c000d36eca32ba82bdf6dbd620e6517c064023fcb11fe48f9a88e8f9be79

  • SSDEEP

    12288:kbqkjZS1Vu8MpJYosZUmc16RWdrpo8+FFcLxT8HoxmRsDJteMKTy81MOU7qOkQR1:kbqkjZSqxYjxoArwQobmMKpiOUFkK1

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2