Extracted

• • Target

    409c2d9aa53c4ed61ccf1830b0f5852e527142aaf0db3c84a22463b8015dbe47

  • Size

    608KB

  • MD5

    a946fdd57831a6edfbc23186d599e9e6

  • SHA1

    b68db0d73e0e5d04ea276c09d27fa3bfa8fdb990

  • SHA256

    409c2d9aa53c4ed61ccf1830b0f5852e527142aaf0db3c84a22463b8015dbe47

  • SHA512

    ec193ffff728cd33551e9237da9481c0fcce538f6daf963c6c9b617122920b98c37887a9d82bf7e37a978ed15561cf11196f6542700a078a2144fd9597b431c4

  • SSDEEP

    12288:5ZGQdqOGyiJqydLqQSeCqsVK8kPRGO35N9mVazXc6F:5Z0BWjeCVVK8kP9N9ouv

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2