Extracted

• • Target

    9da04220ddb4b8ca65e041cc785e93f82d18879caed1eac8a079182898acb2aa

  • Size

    608KB

  • MD5

    36376b2d7dafb8b9709bbba538430d7e

  • SHA1

    3a4a43dbd54604c3dd2c1480bd2268502fc5f03f

  • SHA256

    9da04220ddb4b8ca65e041cc785e93f82d18879caed1eac8a079182898acb2aa

  • SHA512

    ce398b2d960c62aec0fc0953d46b075bbbdb2331142e979adb58ec69e11b71d96d430e62f39c669a93f2648f287ae4113898c459a5a7a7ef1d0dd87bdf93cbec

  • SSDEEP

    12288:ZZGQdqOGnWJqydLqQSeCqsVK8kPRGO35N9mVCzXc6a:ZZ0OWjeCVVK8kP9N9oGc

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2