Extracted

• • Target

    JaffaCakes118_5bbf2d831f817a323f6bbf416b1e4632

  • Size

    608KB

  • MD5

    5bbf2d831f817a323f6bbf416b1e4632

  • SHA1

    908e424daffbbde151d05c8cf7e2d68e354f9601

  • SHA256

    69c72415fa806454ce8a3f29ca16292789c3f7ea7b68fe0610e08979119a43be

  • SHA512

    a89ac0442f68be0c864d609c6c177399fef9f43caf62075af0610923cb7c0b79a22e88a3104211c24f7e428f197986ebf517b6db49d6723e4410e04eb1e73c6b

  • SSDEEP

    12288:RZGQdqOGBaJqydLqQSeCqsVK8kPRGO35N9mVuzXc6:RZ0kWjeCVVK8kP9N9o6

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2