Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9104fee4fa7fa3fbc00647a684c4d431990fa8bfc1c4a9aeb4a76ce27abd6555

  • Size

    1.0MB

  • Sample

    210926-weshbafbal

  • MD5

    a23081e120c76214255c76882fed5158

  • SHA1

    924f93589e61784120c19c7cc8be1ec1a5b1c8f3

  • SHA256

    9104fee4fa7fa3fbc00647a684c4d431990fa8bfc1c4a9aeb4a76ce27abd6555

  • SHA512

    8bfe1ce2c0e1b88b751465463408fa1af2688698e8d48a38dec4c01699818992ae4b221a326c4e184034779726ad5c1a6d094142ecf2db7ee4bb25afe0b7bba6

Score
10/10
danabotbankertrojan

Malware Config

Extracted

Family

danabot

C2

23.254.144.209:443

192.236.194.86:443

142.11.192.232:443
Attributes
  • embedded_hash

    0E1A7A1479C37094441FA911262B322A

rsa_privkey.plain

Targets

    • Target

      9104fee4fa7fa3fbc00647a684c4d431990fa8bfc1c4a9aeb4a76ce27abd6555

    • Size

      1.0MB

    • MD5

      a23081e120c76214255c76882fed5158

    • SHA1

      924f93589e61784120c19c7cc8be1ec1a5b1c8f3

    • SHA256

      9104fee4fa7fa3fbc00647a684c4d431990fa8bfc1c4a9aeb4a76ce27abd6555

    • SHA512

      8bfe1ce2c0e1b88b751465463408fa1af2688698e8d48a38dec4c01699818992ae4b221a326c4e184034779726ad5c1a6d094142ecf2db7ee4bb25afe0b7bba6

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks