Extracted

• • Target

    4355a076c7379bddd023c385d0cbc6d3_JaffaCakes118

  • Size

    576KB

  • MD5

    4355a076c7379bddd023c385d0cbc6d3

  • SHA1

    6d745c46c5e0d20f7a374e82118f61fd9002babb

  • SHA256

    34f1b927ebfc492c8d530827a2db15d83aedf13d962fca1e5f6505d4221e2c5f

  • SHA512

    732f1ee4505c745a5eb1136bc3602a006269959651bd5953dfa8ed133e8b5a2dac306eb4441f7ab4346c555f6646cec8ee248d619384b062b48adfeee903aa06

  • SSDEEP

    6144:uK6cyPiWCgknQ/HuyIzuTVzsMM56519p+6yTrkGxon2QDP/ly+VQyMJ89n:uM+ZdkmHubeaCo6akl2A/sUQBJ89n

  Score

  10^/10

  dridex10111botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2