Extracted

• • Target

    df2ea18c16b1a2e10cf0478047be4e0c_JaffaCakes118

  • Size

    168KB

  • MD5

    df2ea18c16b1a2e10cf0478047be4e0c

  • SHA1

    2d1c0ca7b45318c5b57338112b49ac4b5c5968e5

  • SHA256

    2d28a63e70dc8f1b27d3672f8104f68e4483562b3ff3733825ee4f60200347de

  • SHA512

    95a4d243586880874dd12e72de31374b034eece48865de4c856ffd5d06e85e9a49ff01cb47e1ec6fab4ff8242f9ad33a34dae3bd4a55f81f31d01eea25a30c7e

  • SSDEEP

    3072:e+rGFFRCMcyzAAykMPqIaXpZYnvf3gx4wblxLSoIm/H2QKGB2gC:e+rGFFlXAAcqj8nHgfOoIdG

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2