Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca5b1b7f0ccdfc9b1beaee131b641664b70d326fcf39b0d160f1fd9882688bd6

  • Size

    1.1MB

  • Sample

    220106-nszjsabehk

  • MD5

    62efe74046350abcaef452694ff0051c

  • SHA1

    51c19b460d91029d395435354e761049ac28e2e9

  • SHA256

    ca5b1b7f0ccdfc9b1beaee131b641664b70d326fcf39b0d160f1fd9882688bd6

  • SHA512

    b2d086131311d3387fa7e3f0eae14f5c87234db6be5207afb667047d51e395b4cbf58f8aa2181d7506d020b5e96a09f0b7a88b4d195f1feb33ffcd95864b2cbc

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

192.236.194.72:443

192.119.110.4:443
Attributes
  • embedded_hash

    8357B947FCA843DB2D85EC29EDCDEF3C

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      ca5b1b7f0ccdfc9b1beaee131b641664b70d326fcf39b0d160f1fd9882688bd6

    • Size

      1.1MB

    • MD5

      62efe74046350abcaef452694ff0051c

    • SHA1

      51c19b460d91029d395435354e761049ac28e2e9

    • SHA256

      ca5b1b7f0ccdfc9b1beaee131b641664b70d326fcf39b0d160f1fd9882688bd6

    • SHA512

      b2d086131311d3387fa7e3f0eae14f5c87234db6be5207afb667047d51e395b4cbf58f8aa2181d7506d020b5e96a09f0b7a88b4d195f1feb33ffcd95864b2cbc

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks