Extracted

• • Target

    ba35aac2da0e31b19196b85a8dda6f50N

  • Size

    236KB

  • MD5

    ba35aac2da0e31b19196b85a8dda6f50

  • SHA1

    564ab3740a444785ad5d07bfb7edc7b967417fce

  • SHA256

    0408c940043d7a6c7ee33b858641752e1862b06026b5754a6976419488fa9636

  • SHA512

    3d7bf5df1dbd9619a5780cf63781344d9f0ec41e4145e664e3d9ac769ad8f58b5b5cd6bc6b97bbdec78e2781693b772b44e5140933e25d1ab5ff352814139e56

  • SSDEEP

    6144:B4V3yyQTz8ITeRDZSw3D2Fsd1u/6mv5/dC:BciyQTdT+swTgt/6c/dC

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2