Extracted

• • Target

    f540aff9eb06b347c95e90bc0d1da4ae_JaffaCakes118

  • Size

    168KB

  • MD5

    f540aff9eb06b347c95e90bc0d1da4ae

  • SHA1

    c21554b3ae31e38af3e6bec2799e947d330320fb

  • SHA256

    88ae6f01f6d5b33fc81e5a76596a138113b3755248e8c94491a4d7c3f833597c

  • SHA512

    6fe716fd9ec2e2b36fe8f9f9ce6c2a9943aed672573537d792585fd9da518486c2dc403d30f7ff122bdad0f565a641647c7d5c1ebdd7096d81dac3503e26b814

  • SSDEEP

    3072:J+rGFFRCMcyzAAykMPqIaXpZYnvf3gx4wblxLSoIm/H2QKGB2gC:J+rGFFlXAAcqj8nHgfOoIdG

  Score

  10^/10

  dridex111botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2