Extracted

• • Target

    6d5bfc5d262531682a00ee25f510eeb3_JaffaCakes118

  • Size

    168KB

  • MD5

    6d5bfc5d262531682a00ee25f510eeb3

  • SHA1

    ebea8ddb989781c5b69008b31dc8fc24a1eae81f

  • SHA256

    e16f88451509938d6256bfb70dab9a148aa39903db2e7fded090a501de1b57d8

  • SHA512

    995d1f0293ac7c198d7bb9869ecf3ab1549ba6af0c0d33c14430fca1b2a642bd18688d7ef1f5f7415c48b213939319b717dabfae4479f285f50b6295c8164b45

  • SSDEEP

    3072:G+rGFFRCMcyzAAykMPqIaXpZYnvf3gx4wblxLSoIm/H2QKGB2gC:G+rGFFlXAAcqj8nHgfOoIdG

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2