Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f52ce236cf72769e779278f12c169a4f706749f160e9e251661338552499080d

  • Size

    1.8MB

  • Sample

    211229-ws6bbsdfhk

  • MD5

    d0416cb61a0f85782b6d46e3c4b9cb2f

  • SHA1

    405cad65c3d6c5361a296782ef57c2ac5dfc7b06

  • SHA256

    f52ce236cf72769e779278f12c169a4f706749f160e9e251661338552499080d

  • SHA512

    3f20ea1558502e15f77def425730cb01e08519063c3bf9f56516d1e38326a6ccedeffa7f224f49c915a962efcf661428d73b684bfabfb5c29454afdeea97dd38

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

192.236.194.72:443
Attributes
  • embedded_hash

    0FA95F120D6EB149A5D48E36BC76879D

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      f52ce236cf72769e779278f12c169a4f706749f160e9e251661338552499080d

    • Size

      1.8MB

    • MD5

      d0416cb61a0f85782b6d46e3c4b9cb2f

    • SHA1

      405cad65c3d6c5361a296782ef57c2ac5dfc7b06

    • SHA256

      f52ce236cf72769e779278f12c169a4f706749f160e9e251661338552499080d

    • SHA512

      3f20ea1558502e15f77def425730cb01e08519063c3bf9f56516d1e38326a6ccedeffa7f224f49c915a962efcf661428d73b684bfabfb5c29454afdeea97dd38

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks