Extracted

• • Target

    fe8f4b38ff583c42c615696097e1c196_JaffaCakes118

  • Size

    920KB

  • MD5

    fe8f4b38ff583c42c615696097e1c196

  • SHA1

    74bc398220c83191c8bb493ce30acd4400917d66

  • SHA256

    de81f923ca4c12378688a8e26fbb0ec11d69d35f509cff7815fd3d4bc9bb0f59

  • SHA512

    aedb1cfb2f81c1c0c193827673d8b6b067699c115c9d00be6fa68ef8e336d7dcb7cdaf234854f01aaa106d8b4bef61d3fb8923a7176fbe66c06a4ad78eae2c8a

  • SSDEEP

    24576:EfWfnaVoffEQmyO378WTkvEKT9Hgce1BHbowCm:Euaq34yDWTkvvT9HgdbowC

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2