Extracted

• • Target

    bf85ebeccfa61926d444872ce6a650367180cb13c5237a4bb9816724126cc007

  • Size

    1.4MB

  • MD5

    3b773ec37513467206c8053f3d7ddadb

  • SHA1

    ef819d13531c88be69cba107340e6cf90eef6623

  • SHA256

    bf85ebeccfa61926d444872ce6a650367180cb13c5237a4bb9816724126cc007

  • SHA512

    4e57d222603b5066882ddfb7209bec411345cff6a39fa04f4a235780f434d26ef3f4567f5daf910fd6b3a372a87b97236300c57dc71b1d1c98764e067fa31192

  • SSDEEP

    3072:gjwDm1gWq7Y+jbkGenScL1FsrKY/gnl4PNN0Bi3434YFOmOXoHOZNxXgXTP+MrGV:gjwDmrqel7oe4nmOXouZRYGo

  Score

  10^/10

  dridex10111botnetdefense_evasiondiscoverytrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Downloads MZ/PE file

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    defense_evasiontrojan
  behavioral1behavioral2