Extracted

• • Target

    JaffaCakes118_34da2cb8d8f894cbebd79319be1b852d

  • Size

    608KB

  • MD5

    34da2cb8d8f894cbebd79319be1b852d

  • SHA1

    67dbfb80a062172e32d140194b8e0f136cda8436

  • SHA256

    a1ab0aeea4582f6fbd965eeac158b8f523607ba5168e4ece3539af70d8ab061d

  • SHA512

    44e5b9bb883293dd5a94caaef962e980c4c0dcc450f1c07e90d454d35097525e74b35e3136f32e1f345fd19930a7d547735cd8f706a060fb7eafd690de2517fa

  • SSDEEP

    12288:9ZGQdqOGVeJqydLqQSeCqsVK8kPRGO35N9mV6zXc6:9Z0gWjeCVVK8kP9N9oO

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2