Extracted

• • Target
    c6f2239754469a59c8f97e30df2e0950
  • Size 315KB
  • SHA256 e028f271461ba72f91934ada56064d0eab66b4ad3066d653632fad04351efb00
  • MD5 c6f2239754469a59c8f97e30df2e0950
  • SHA1 4310f7e6baaf4f86defd9c052ea40649f6b04e9e
  • SHA512 a5d6d2c4bbfc96626fa2e1a6969b4692f0529f0971b7b4f217e099bb4852427beb669f900f820206c542aab2321411bf4aa3e71e2c2847648806292478aa46dc
  • MD5 SHA1 SHA512

  Score

  10^/10

  dridex22202botnetevasionloadertrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Dridex Loader

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2