Extracted

• • Target

    78de41633c563cfbd6cafcdf308c0350N

  • Size

    236KB

  • MD5

    78de41633c563cfbd6cafcdf308c0350

  • SHA1

    9332c003b2508611cfafbfc55704ea82895395a7

  • SHA256

    8d34c75f8d69675eb0bb94b920f4688a0e3b2c40006378e8f0c375f89ed4f298

  • SHA512

    5a2151265b93ca9aa133762134cdc256f59a6fd0f193dcc318088dd9282802a19c559ceed970c075534ab67c561ec1bd183efe0b4c827c4a6ad6c19902bbaeeb

  • SSDEEP

    6144:84V3yyQTz8ITeRDZSw3D2Fsd1u/6mv5/dC:8ciyQTdT+swTgt/6c/dC

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2