Extracted

• • Target

    4f2ac8c6a5eec50e093c9fe14e2597b691a6a0eda9867e17cd2fa17aba1e8a75

  • Size

    608KB

  • MD5

    e413f3a91ad86c1d165b54ada721c5ab

  • SHA1

    55ef7747b281eb556b72d7c75619884dba01a51c

  • SHA256

    4f2ac8c6a5eec50e093c9fe14e2597b691a6a0eda9867e17cd2fa17aba1e8a75

  • SHA512

    003187ad0039284c43451db8c538da5974b6e4e950eb136ad4bc5ff78edf9cc1ad9700aa6f259f5d760b6db3183ceabb89082a10f2a0e101358a78fc67873d39

  • SSDEEP

    12288:sZGQdqOGH3JqydLqQSeCqsVK8kPRGO35N9mVjzXc6:sZ0fWjeCVVK8kP9N9on

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2