Extracted

• • Target

    73bb3022992da1cdaea3b45fd7de67da12bcd95e7078a8eeb2c2feb8f3516020

  • Size

    608KB

  • MD5

    6ee7398aa127b00ec1c4c99fa4b938ca

  • SHA1

    be7a1fcf25903d8fcc2708fd0f53eee8cd07ce37

  • SHA256

    73bb3022992da1cdaea3b45fd7de67da12bcd95e7078a8eeb2c2feb8f3516020

  • SHA512

    daae02df6ffb6655ffe2d7399c67f901b02648791179699e9712d847703d2f0dcf86ca42eba430d247ecae2b8b366d9d64fa8f5e6f0b5f1135da4e11a6510a72

  • SSDEEP

    12288:GZGQdqOGIHJqydLqQSeCqsVK8kPRGO35N9mVPzXc6O:GZ0SWjeCVVK8kP9N9oL8

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2