Extracted

• • Target
    cifvmc5rar
  • Size 830KB
  • SHA256 f045bc5d0dc4890be3163fa236c403dab3d444e92fd5ddc0356dbf3f25f829af
  • MD5 8c1c54884b90c015330ef19c0cb0a4fc
  • SHA1 e222675107a78e19648479a3a994f63fcc58f2a2
  • SHA512 bf4cbee52dfe8c7dd5ab33a8b8e121d9d9cc92b2ebf720026dc3dd4e48f16bb8a5c0970cf7a4dc18b547c3ed4632ae48b1628f46c85436d0dc947baaf886b4e3
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex10555botnetdiscoveryevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Dridex Loader 'dmod' strings

    Detects 'dmod' strings in Dridex loader.

    botnetloader

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2