Extracted

• • Target

    JaffaCakes118_48bfd5f4353e3b21ef714925204edcf3

  • Size

    608KB

  • MD5

    48bfd5f4353e3b21ef714925204edcf3

  • SHA1

    a4864c8fdde3f59bcedf13f73e15a9783fbef973

  • SHA256

    eb49a6cba72b1b600170bb9c870cbabcd975765064ec7e14d19d17d2311734ef

  • SHA512

    c2229cb6dbca868a9f03667f077cac4b2a5ca20483f57b2d088ccf95bec15e5fe38654396aa8505e7e51a786cbf2457d710938bdc546a769894d3da3aaea9100

  • SSDEEP

    12288:sZGQdqOGnbJqydLqQSeCqsVK8kPRGO35N9mV/zXc6:sZ0TWjeCVVK8kP9N9o7

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2