Extracted

• • Target

    JaffaCakes118_d5a01b8861106470eee217699f45de1f

  • Size

    608KB

  • MD5

    d5a01b8861106470eee217699f45de1f

  • SHA1

    17e1f3aa9d37851042ac3f43edbdef0e978283c5

  • SHA256

    8bc50f906a061cd2e1b5f32b878f3ae6acd06b147da5d0f2d96ebe5800881aaa

  • SHA512

    a560d2782b65b35531a1f860ab973cbba1959d5f40469b685475b2c2430a1809399dc3dded653ba16aae5979e8ea6c2c052ba1e75761101d13228730781c3f23

  • SSDEEP

    12288:iZGQdqOGmdJqydLqQSeCqsVK8kPRGO35N9mVNzXc6:iZ0SWjeCVVK8kP9N9oR

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2