Extracted

• • Target

    JaffaCakes118_d21a1e1c32f8cb2e1d0e96320dc0ed54

  • Size

    608KB

  • MD5

    d21a1e1c32f8cb2e1d0e96320dc0ed54

  • SHA1

    968086db18516567b98dfb286f6cb65715801593

  • SHA256

    05937629da10ef34613f75ab9734f581cfc8fe7b239c3521834916b6f1b8be37

  • SHA512

    35a52e25fd64b150b95d72336c772603609b356e9e179978a3af4b7e8e794193c6fd77a124a575d43b581972ba05895d23533dd493b53405aaa2ec93cdcf1b08

  • SSDEEP

    12288:TZGQdqOGWLJqydLqQSeCqsVK8kPRGO35N9mV/zXc6:TZ0oWjeCVVK8kP9N9o7

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2