Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa2e4b9b42451bc3aa2215500f7ab1f51cdb19414a8ae50acefb9945729e37aa

  • Size

    1.8MB

  • Sample

    220105-tzxawsaee5

  • MD5

    deedd92ae1c2a1d5a66a1b0380f15925

  • SHA1

    b619f14fbffde3d70c76a33bb049b0deefc80e77

  • SHA256

    fa2e4b9b42451bc3aa2215500f7ab1f51cdb19414a8ae50acefb9945729e37aa

  • SHA512

    80e83335d16e66ffb03f6668d10593f2e0c84c3e744fe3eb93773257963b62a6e6370d6ca99a765abaa854b2a086e62c5fe2131109d898f3b126713856458f26

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

192.236.194.72:443
Attributes
  • embedded_hash

    0FA95F120D6EB149A5D48E36BC76879D

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      fa2e4b9b42451bc3aa2215500f7ab1f51cdb19414a8ae50acefb9945729e37aa

    • Size

      1.8MB

    • MD5

      deedd92ae1c2a1d5a66a1b0380f15925

    • SHA1

      b619f14fbffde3d70c76a33bb049b0deefc80e77

    • SHA256

      fa2e4b9b42451bc3aa2215500f7ab1f51cdb19414a8ae50acefb9945729e37aa

    • SHA512

      80e83335d16e66ffb03f6668d10593f2e0c84c3e744fe3eb93773257963b62a6e6370d6ca99a765abaa854b2a086e62c5fe2131109d898f3b126713856458f26

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks