Extracted

• • Target

    JaffaCakes118_b7031b13fdbed2f77db62a2e52169e5a

  • Size

    608KB

  • MD5

    b7031b13fdbed2f77db62a2e52169e5a

  • SHA1

    7970c96c62a12c22ea2592e94efc9bffdd74979e

  • SHA256

    ed01d6524a1ab3c38528f74bed5668002e96f5c2cba7dbadbd6a84ddcad37534

  • SHA512

    1ea88e37cd046374c796ccb7974282ff49588dda7219afc7f0f96f470bab7c543b6f1e8c40027251691e82632bdddf5c838a0021a6c6ce606315e02cf5defa3e

  • SSDEEP

    12288:+ZGQdqOGX3JqydLqQSeCqsVK8kPRGO35N9mVLzXc6:+Z0fWjeCVVK8kP9N9of

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2