Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5

  • Size

    1.3MB

  • Sample

    220925-jv6zesdhb5

  • MD5

    ed3c7179943462af3b79b62ce59b7ad5

  • SHA1

    5b869c5f70c5a50014e431f3fca0b4efe6aef812

  • SHA256

    2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5

  • SHA512

    3a907731639048b23b8995e13dd0de4ca38fdea76d2bb1f07f82eee2ca382eb4408530dee2f482c89dee06af6a1966cccbf800b48e3cb9ed25d8952fb1732346

  • SSDEEP

    24576:fErYJBXOFx6VGyd54z+pOTCrOGrWyUgxVNs74V76ZCTcteI3n+vy5np99ye:vBXOwGH+oTCrOGiyU2s787CCTcII3n+q

Score
10/10
danabotbankertrojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443
Attributes
  • embedded_hash

    6618C163D57D6441FCCA65D86C4D380D

  • type

    loader

Targets

    • Target

      2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5

    • Size

      1.3MB

    • MD5

      ed3c7179943462af3b79b62ce59b7ad5

    • SHA1

      5b869c5f70c5a50014e431f3fca0b4efe6aef812

    • SHA256

      2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5

    • SHA512

      3a907731639048b23b8995e13dd0de4ca38fdea76d2bb1f07f82eee2ca382eb4408530dee2f482c89dee06af6a1966cccbf800b48e3cb9ed25d8952fb1732346

    • SSDEEP

      24576:fErYJBXOFx6VGyd54z+pOTCrOGrWyUgxVNs74V76ZCTcteI3n+vy5np99ye:vBXOwGH+oTCrOGiyU2s787CCTcII3n+q

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot
    behavioral1

MITRE ATT&CK Matrix

Tasks