Extracted

• • Target

    JaffaCakes118_905f4259265cdc1113c61919f6b8b1fe

  • Size

    608KB

  • MD5

    905f4259265cdc1113c61919f6b8b1fe

  • SHA1

    29cb3c6b194862a84d240b70fb62ac7ef6d73858

  • SHA256

    3244e6e58b7af5c2293bb50633359fb6ec98074c4e29624cbd4b2540a038978b

  • SHA512

    48e082ee5aade3923675a3cbd4b217709dea865a4b391bb0b000f6320abae6db49c2b0757c975a2273d2f224dd7ff6c54c83ed95a99cae92d073b8cb0cfca75f

  • SSDEEP

    12288:sZGQdqOGXMJqydLqQSeCqsVK8kPRGO35N9mV4zXc6:sZ00WjeCVVK8kP9N9oE

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2