Extracted

• • Target

    94a348d5172ca8a658fef7809af40b72_JaffaCakes118

  • Size

    920KB

  • MD5

    94a348d5172ca8a658fef7809af40b72

  • SHA1

    f04aa731ffc8f7c2313138a72eabebd3df74b5b1

  • SHA256

    b6ab389440b4a038ffde4ca381640a0bd982f8e970bcffdbe82629c0ae395ca7

  • SHA512

    5e5fcba03d192ca5b7937201d0ce71774b12155f40ea40c62d1e20ce9eefd8b0fbcc471bf725a4bd4f6f72fd272122166e647deeaba1d086ba8cdbd1a6e8eb53

  • SSDEEP

    24576:PgWfnaVoffEQmyO378WTkvEKT9Hgce1BHboXCm:Yuaq34yDWTkvvT9HgdboXC

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2