Extracted

• • Target

    6026c4c805e1e4e64391cdefd6dca3c9_JaffaCakes118

  • Size

    1.0MB

  • MD5

    6026c4c805e1e4e64391cdefd6dca3c9

  • SHA1

    16a93d0e01226a3c5e578609353873b967d37e42

  • SHA256

    375b074151ad601e467078321beb924d344b977a8b3594c29596954ed20a9995

  • SHA512

    2cd324e04290eab9647a744cf31186ba09239757c8a8daeee68fbc12f00ce08b32a241ad294b11f373f014101d6e67e0c9ad6fc8e82080ef507f48b176f45080

  • SSDEEP

    24576:KxumPtwAiyvA/7bGIkFXNr9ypZQf3E/DzLhukd5TkWCf7Zgugu:s3Pvo/3G9XNr2A38XhDTkpf7Zgugu

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2