Extracted

• • Target

    d2a068db3424f7086ad794156af6e846_JaffaCakes118

  • Size

    168KB

  • MD5

    d2a068db3424f7086ad794156af6e846

  • SHA1

    f1ac0deea534ac269d452bd9f37e8258b486f501

  • SHA256

    dd1948dee05bc77802de8c964db450c47d6fdcb14943a3dd962cb11d4637ea73

  • SHA512

    42df6091b1419504bc331157f344c22185a61ae840dce67ea613546cce177ee8d90c49c435868632f413e903fb042aaea31ffb60042884ea2d11161094a50147

  • SSDEEP

    3072:s+rGFFRCMcyzAAykMPqIaXpZYnvf3gx4wblxLSoIm/H2QKGB2gC:s+rGFFlXAAcqj8nHgfOoIdG

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2