Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac2ff361585625b8f1988e20ef00acf25d40f5b43c6025018bb8c2b96fd8b049

  • Size

    196KB

  • Sample

    220924-t4w6pachhr

  • MD5

    7be05ae221e8cff71446c75ce04a0bed

  • SHA1

    aa2ff15284e855cc5d123bedd82cef78c3b4a115

  • SHA256

    ac2ff361585625b8f1988e20ef00acf25d40f5b43c6025018bb8c2b96fd8b049

  • SHA512

    82d5a4d9e434bd6944387b768064713ce964dfa6822c7d575fdedda8a0832f7e9be7b7f01b752a44365526e07281a8048e7a3dc0c05aa593dfc7db33f20abe07

  • SSDEEP

    3072:R0pP9L3M0xaA5TgUSQYsUKvTEmriIzBWrAFG7BZVlCc/Pkk4x:uLPxVh5TzriIzBWrAx

Score
10/10
danabotbankertrojan

Malware Config

Extracted

Family

danabot

Attributes
  • embedded_hash

    6618C163D57D6441FCCA65D86C4D380D

  • type

    loader

Targets

    • Target

      ac2ff361585625b8f1988e20ef00acf25d40f5b43c6025018bb8c2b96fd8b049

    • Size

      196KB

    • MD5

      7be05ae221e8cff71446c75ce04a0bed

    • SHA1

      aa2ff15284e855cc5d123bedd82cef78c3b4a115

    • SHA256

      ac2ff361585625b8f1988e20ef00acf25d40f5b43c6025018bb8c2b96fd8b049

    • SHA512

      82d5a4d9e434bd6944387b768064713ce964dfa6822c7d575fdedda8a0832f7e9be7b7f01b752a44365526e07281a8048e7a3dc0c05aa593dfc7db33f20abe07

    • SSDEEP

      3072:R0pP9L3M0xaA5TgUSQYsUKvTEmriIzBWrAFG7BZVlCc/Pkk4x:uLPxVh5TzriIzBWrAx

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks