Extracted

• • Target

    a4fac616a87e9b6a069d06bfc41e8dce_JaffaCakes118

  • Size

    920KB

  • MD5

    a4fac616a87e9b6a069d06bfc41e8dce

  • SHA1

    7539824aa549a6c1abdad3e4c96ea2184f654877

  • SHA256

    ac152e73957a8cb702eb7f18bb38e2bf92e4702e108ac71d403b829600b2029f

  • SHA512

    5fe79324231a84ba6497fa61c6a14b70b3b8073071e807e09f5d98089c1693b066953d2f26b385d59e78554d55e8ce7c05f875aacebacb3c434ed4850e9d374c

  • SSDEEP

    24576:s8WfnaVoffEQmyO378WTkvEKT9Hgce1BHbogCm:/uaq34yDWTkvvT9HgdbogC

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2