Extracted

• • Target

    JaffaCakes118_a406e66f87860e8e4369cdfd39228c8f

  • Size

    481KB

  • MD5

    a406e66f87860e8e4369cdfd39228c8f

  • SHA1

    2653bb6e62e289de5373012a4de89595df7f26fd

  • SHA256

    0a1e917be7ffa997f003bf18267e8e5c2bc986111b84dae89afb834747e86f8a

  • SHA512

    99d5481ca85cdf2db8852b367658ce01f4a1ead875c1bb234bdec4e49f84598444f5ed91dcc42140bda891d394a4ba675cfcd1b3eaea624ce4318026e7f571f4

  • SSDEEP

    6144:0jsulkCwDvneDKUuSB0CxaCIjRWNtttZdJxBvgHLWMm2caK4uKc5qCdB:02rDvne0S6e0jQVZdrBFaynj

  Score

  10^/10

  dridex10111botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2