Extracted

• • Target

    JaffaCakes118_6511df1bc36a005dde9aeca27924c065

  • Size

    608KB

  • MD5

    6511df1bc36a005dde9aeca27924c065

  • SHA1

    ba4b1e0ac9a1629d707b5cfdb9403c69edf9a1cd

  • SHA256

    a41013aa5b103e8db7d3afb55358ba2a822358a32fa2c35cda53e577b7cf875f

  • SHA512

    4752afda68fbdfa6d0c728ccc979576d80e72c6021839d927d84c26a16cfaa8a3bdb0230034fc31770baa47499b5ddf93da95f88a3a6ce8cdcd0f1ec03d4084e

  • SSDEEP

    12288:NZGQdqOGBLJqydLqQSeCqsVK8kPRGO35N9mVTzXc6:NZ0VWjeCVVK8kP9N9oX

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2