Extracted

• • Target

    ed8ca9c5a99f3188e808ae63ec0e51bb70d937953a623bb6ef37c6587f96b1bf

  • Size

    608KB

  • MD5

    aad68ea5811a92e04404b16f23ce51fa

  • SHA1

    ad052fa58d4274d8e91e8feeb11420569c924ea8

  • SHA256

    ed8ca9c5a99f3188e808ae63ec0e51bb70d937953a623bb6ef37c6587f96b1bf

  • SHA512

    d5e1dcbb9f43ae35b49e5b5b8070cb55baf2763b10ba7bab973c17e14f0c0f18c748f9cd46bce875870a3f63fdac5d831d79ec26df0f9481da7dea31cf7c5ba3

  • SSDEEP

    12288:+ZGQdqOGTMJqydLqQSeCqsVK8kPRGO35N9mVgzXc6T:+Z0AWjeCVVK8kP9N9o8h

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2