Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d9981500a0b6857e8d6ab74092a59acccdd6fbd3d265cf2993018ba40c60024

  • Size

    1.0MB

  • Sample

    210926-mydzlaefh7

  • MD5

    2b88bfa77051be2ce4bb3ee6739eb35b

  • SHA1

    5acd13811d18f8506ee5f8925071b24faa56dec5

  • SHA256

    8d9981500a0b6857e8d6ab74092a59acccdd6fbd3d265cf2993018ba40c60024

  • SHA512

    b03bcad0b492fe950a0efc3035bcd0a3188a536a9c6f7a1a7ca84573555b5867c0cacd6a03c675f331d39ed8d6be0ea39f37e1e245bfa4223685ea06c38eb7d3

Score
10/10
danabotbankertrojan

Malware Config

Targets

    • Target

      8d9981500a0b6857e8d6ab74092a59acccdd6fbd3d265cf2993018ba40c60024

    • Size

      1.0MB

    • MD5

      2b88bfa77051be2ce4bb3ee6739eb35b

    • SHA1

      5acd13811d18f8506ee5f8925071b24faa56dec5

    • SHA256

      8d9981500a0b6857e8d6ab74092a59acccdd6fbd3d265cf2993018ba40c60024

    • SHA512

      b03bcad0b492fe950a0efc3035bcd0a3188a536a9c6f7a1a7ca84573555b5867c0cacd6a03c675f331d39ed8d6be0ea39f37e1e245bfa4223685ea06c38eb7d3

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks