Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbc643a23344a15172c9de86cb387d87e62fe317f3e850c5a43577f8c9b35a1c

  • Size

    1.1MB

  • Sample

    220112-l1tmdsccal

  • MD5

    d2d40f9caf63648d694ef8df6651179b

  • SHA1

    5322ac4744a7d0eb9556464ab7b3aefe31ebf42d

  • SHA256

    cbc643a23344a15172c9de86cb387d87e62fe317f3e850c5a43577f8c9b35a1c

  • SHA512

    70e3b235b5712582aa5ae55a93e14e6e6e5bc7484c78df948b17b153067f3381f1b6649bf20f0307221ad22388b5a58b532c9e567f7b585cf1f49a0989ce84ad

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

209.127.27.22:443

103.175.16.114:443

103.175.16.113:443
Attributes
  • embedded_hash

    422236FD601D11EE82825A484D26DD6F

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      cbc643a23344a15172c9de86cb387d87e62fe317f3e850c5a43577f8c9b35a1c

    • Size

      1.1MB

    • MD5

      d2d40f9caf63648d694ef8df6651179b

    • SHA1

      5322ac4744a7d0eb9556464ab7b3aefe31ebf42d

    • SHA256

      cbc643a23344a15172c9de86cb387d87e62fe317f3e850c5a43577f8c9b35a1c

    • SHA512

      70e3b235b5712582aa5ae55a93e14e6e6e5bc7484c78df948b17b153067f3381f1b6649bf20f0307221ad22388b5a58b532c9e567f7b585cf1f49a0989ce84ad

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks