Extracted

• • Target

    d98a97a19e00e699b44f4d50e9724ed0N

  • Size

    236KB

  • MD5

    d98a97a19e00e699b44f4d50e9724ed0

  • SHA1

    0255d955604787ff6da7ec34c498eee2c15ea587

  • SHA256

    81228bad32d7767ac375af937eacf20fadf365779697fcaaf115401e5f0eb8b3

  • SHA512

    2ef200a5e7cc5be247c7edf5a6b9a212b2d447e4af68ce1ec0e0b15285ffb147eb317c3fa26c5472ab47720727fd4860ce23af4bdc281141f635123b79d9a329

  • SSDEEP

    6144:Q4V3yyQTz8ITeRDZSw3D2Fsd1u/6mv5/dC:QciyQTdT+swTgt/6c/dC

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2