Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    411cf3b6f1e00049a54fedc226eb435d4a9af54e8d756db502eff89083a28865

  • Size

    1.0MB

  • Sample

    210926-sx28pafaal

  • MD5

    a28bef3f2f74154381a47a87f00b345c

  • SHA1

    c3a0966ccc5218e24b1856cce8222ccca6889593

  • SHA256

    411cf3b6f1e00049a54fedc226eb435d4a9af54e8d756db502eff89083a28865

  • SHA512

    df49ccb102fbe61aaa85d55abaa28a2f13022103ad3689bd6f4c2cf51ebd7549c8c8c2ef06e30316158ebd1b1c8947e8ca4c19f98ba75f1c2543da3b7ea63e01

Score
10/10
danabotbankertrojan

Malware Config

Targets

    • Target

      411cf3b6f1e00049a54fedc226eb435d4a9af54e8d756db502eff89083a28865

    • Size

      1.0MB

    • MD5

      a28bef3f2f74154381a47a87f00b345c

    • SHA1

      c3a0966ccc5218e24b1856cce8222ccca6889593

    • SHA256

      411cf3b6f1e00049a54fedc226eb435d4a9af54e8d756db502eff89083a28865

    • SHA512

      df49ccb102fbe61aaa85d55abaa28a2f13022103ad3689bd6f4c2cf51ebd7549c8c8c2ef06e30316158ebd1b1c8947e8ca4c19f98ba75f1c2543da3b7ea63e01

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks