Trusted Design

A New UAC Bypass Method that Dridex Uses

概要

Dridex is a banking trojan, which is a bot that communicates with a C&C server through HTTP. This variant uses a new UAC bypass method that has been used by the Dridex malware since December, 2014.

Created: 2026-02-23

Indicators

• FileHash-SHA256 - 3eab2a09fe6cc433cbb7567bfdde81ba9edc4f8af01ffc869394fe93983d7b7d -
• FileHash-SHA256 - bc93e9bdf92f0a9fb24ccbf053f59d79e31588a956204b4d09efff1091a40c89 -
• FileHash-SHA256 - 1cff58a3f08fec11dededd2df09e0e1425466886ab8f154561108e9d564e5c36 -

類似Pulses

• Drixed / Dridex - Sophisticated Banking Malware (score: 0.76)
• Dridex C2/Nodes (score: 0.73)
• dridex-financial-trojan (score: 0.72)
• Dridex Banking Trojan (score: 0.70)
• Dridex’s New and Undiscovered Recipes (score: 0.67)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る