Extracted

• • Target

    e652e4656e036887ef4b145b2eb9bfd92e908889302e42a9ca74e66ed1ac64a7.dll

  • Size

    888KB

  • MD5

    e942ee5d7e6de286de94bf6271de5925

  • SHA1

    cacafb933cafbc01c02f6223f15f647d4e1bab5f

  • SHA256

    e652e4656e036887ef4b145b2eb9bfd92e908889302e42a9ca74e66ed1ac64a7

  • SHA512

    3ad359f5c8bfbdd1f846c85f0bce2c634accc54309bf15263e9db255eb7a205f33221e82be9e865c4d9b623a52d697d449809effcf725c7dd36884bd5399f065

  • SSDEEP

    12288:pTjo1UKnOwSOMjRZbubLKleVahHjlTBwHX5sdNl7tzbrQ/kYljKWsLAZCfyXTq2:BsOdO2RZKqmahBFhlFbBfWssZgyXTq

  Score

  10^/10

  dridex10444botnetdefense_evasiondiscoverytrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    defense_evasiontrojan
  behavioral1behavioral2