Extracted

• • Target

    JaffaCakes118_18b969033685963bff6a4b9a50bed4ea

  • Size

    608KB

  • MD5

    18b969033685963bff6a4b9a50bed4ea

  • SHA1

    840be3c94661aa904de89d8f63c171b34f853b7b

  • SHA256

    fe536e8e8894d955fb8b9fe6fa91413f7e83a4252f457a4c771d1a808d137b8d

  • SHA512

    9a9555ab1bdc1b77f197a6ab3dab5f4361adbd36268fdbb2d038dd52f7b5407072719ad13fb746fb3ccd926c17d9fb5047884155e1fcad95b269cb2bc2c20019

  • SSDEEP

    12288:LZGQdqOGtXJqydLqQSeCqsVK8kPRGO35N9mVrzXc6:LZ0lWjeCVVK8kP9N9o/

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2