Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7508344c547d654937e4f1e51245488e562aaa12df42310bb9d1ecfbd08166da

  • Size

    1MB

  • Sample

    220113-l8es7shcf9

  • MD5

    53bcf7fa7f6a41aab81d960598625d37

  • SHA1

    7809c508e5ed2f8221afbfeb03a435a1686fa231

  • SHA256

    7508344c547d654937e4f1e51245488e562aaa12df42310bb9d1ecfbd08166da

  • SHA512

    1f10efaa2f9d71c594286dc12dd3903e9c7dc2487357b9ffc4f3f9642fb02c80e7074659ecc9e4c48409de6d6cecc6d080546b75fa0e6c5575efab142fc2e01c

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

103.175.16.113:443

103.175.16.114:443

Attributes
  • embedded_hash

    422236FD601D11EE82825A484D26DD6F

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      7508344c547d654937e4f1e51245488e562aaa12df42310bb9d1ecfbd08166da

    • Size

      1MB

    • MD5

      53bcf7fa7f6a41aab81d960598625d37

    • SHA1

      7809c508e5ed2f8221afbfeb03a435a1686fa231

    • SHA256

      7508344c547d654937e4f1e51245488e562aaa12df42310bb9d1ecfbd08166da

    • SHA512

      1f10efaa2f9d71c594286dc12dd3903e9c7dc2487357b9ffc4f3f9642fb02c80e7074659ecc9e4c48409de6d6cecc6d080546b75fa0e6c5575efab142fc2e01c

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix

Tasks