Extracted

• • Target

    aeb89feabdc2f252f10b17e843b97e22_JaffaCakes118

  • Size

    785KB

  • MD5

    aeb89feabdc2f252f10b17e843b97e22

  • SHA1

    312406f72fadba43e1c53c254d5ac8369993550a

  • SHA256

    08770b7ce4f415232f98b641ae609c593dcf6a0907d854fe2acbdbe01c5b6d2c

  • SHA512

    79c880f6f98ce0c79eb664ec6622ba5e50853066c14bfd941a6aed4d4ee5d67ac6ef95f095fc361fa7283352f01f200ab4d4d46ed9530efdebacb83ab622b511

  • SSDEEP

    12288:HbqkjZV1Vu8MpJYosZUmc16RWdrpo8+FFcLxT8HoxmRsDJteMKT281MOU7qOkQR1:HbqkjZVqxYjxoArwQobmMKNiOUFkK1

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2