Extracted

• • Target

    a43b7c1fff94a3a2c9cda875dc21e5bc57819537d1f6b9f9b91271e895201638

  • Size

    604KB

  • MD5

    2901a3d99aeb6d2231f77ed1787a6a44

  • SHA1

    d5b8701ce4f615d0c9c427b060edfa398dd1df62

  • SHA256

    a43b7c1fff94a3a2c9cda875dc21e5bc57819537d1f6b9f9b91271e895201638

  • SHA512

    c3dd61e13fd28cf03400bccac710c4a3aa05e71fadaa9bb1e381a86c761f90c33a0c5c5ca8f6393c50e60b379c818d54c93cac384e5a2ee95ab6fefb9c52c578

  • SSDEEP

    12288:9uIB/bwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbqW/I:I6b4wqyaDA5sTWiXT2tq07G2v/I

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2