Extracted

Extracted

• • Target
    Sept29-2020.doc
  • Size 100KB
  • SHA256 76b1e67c05fb015acfb6387b20b3db04968ebdfb3ec9cbc0bd9885053a9f43b7
  • MD5 d19e2afc2c054ed51820f6ae8fb709d0
  • SHA1 6f762aecbab2e5bb3c0ff64c89785d0476a7230c
  • SHA512 ff5c4f99c405c975d825fe2bd89f1d5395d6f8513172c859e4849574882a59956f874c1f3fec3e61594b2953392e6b6d2263e706fad31de3b915c2adf03a8854
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex10555botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2