Extracted

• • Target

    8040027d3b0d5643837366b46e114e47_JaffaCakes118

  • Size

    784KB

  • MD5

    8040027d3b0d5643837366b46e114e47

  • SHA1

    4f1daa28ca0d3cc0bb9044c2a225df33b9bf80eb

  • SHA256

    582f062af319c7e2f23be49d321125334f497b9eebe9ac997bbd00d883020e68

  • SHA512

    dd8b58a1702d831f20a868675d202d70de17f97352889274de0b7c7936a75ca57a1f39d68b7fbe28a23b5c8997552f6c5f95265efe5f52c96e499c7110e46537

  • SSDEEP

    12288:jH2Bjy7t9KVRxsYFPRSo5XkBCLu+PY1iqTrGaFhnt/vqqBhf94MOFNkSr:jH2Jgt9eDpSxP1iqTzVSqBr5OFx

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2