Extracted

• • Target

    JaffaCakes118_aaedac77190667ab62eba165fc1c158e

  • Size

    608KB

  • MD5

    aaedac77190667ab62eba165fc1c158e

  • SHA1

    164352b0bc2a2d54948d994a4b4e4d68ecd260e4

  • SHA256

    79f9609b8eed0a77a76805747c4cef0af604d74656d354898f622428e52ceecc

  • SHA512

    c939c6a48cf59012707e6e6af0da7f9598b001420649a5353684f1950147e77d55c3091f5ce4ba53217371c68e49e1712ff6eb4b2cc30a51740a2bc182c0b0ab

  • SSDEEP

    12288:nZGQdqOGn8JqydLqQSeCqsVK8kPRGO35N9mVQzXc6:nZ0kWjeCVVK8kP9N9os

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2