Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2777647da697019ed878d27d6e9bc82ea97d4efbaddd8c8a270822fd8999929d

  • Size

    1.2MB

  • Sample

    221003-fenalagef6

  • MD5

    e17e5a18e6bd934ae53ab90ddde3d9e4

  • SHA1

    804ed2db85bc6360b667b17272b250761cfe1841

  • SHA256

    2777647da697019ed878d27d6e9bc82ea97d4efbaddd8c8a270822fd8999929d

  • SHA512

    3e3efa121b5c49e6ce73e0813261fae0cc03fa3f5fd41a938905c112961138aae5df4a8531df4f7ca24dc06350162eb0caa549851910bb278dbcbba5570abc33

  • SSDEEP

    24576:kaFcQrjgAfwWbpxdEJEEdkrOf8mbIzRjUEK6BiiQ0ThvIC05uB:kfQrjgAtmQm8mMz+EKAiiv1AWB

Score
10/10
danabotbankertrojan

Malware Config

Extracted

Family

danabot

C2

192.236.233.188:443

192.119.70.159:443

23.106.124.171:443
Attributes
  • embedded_hash

    F11D3871631E16E8DE15C24B32328D98

  • type

    loader

Targets

    • Target

      2777647da697019ed878d27d6e9bc82ea97d4efbaddd8c8a270822fd8999929d

    • Size

      1.2MB

    • MD5

      e17e5a18e6bd934ae53ab90ddde3d9e4

    • SHA1

      804ed2db85bc6360b667b17272b250761cfe1841

    • SHA256

      2777647da697019ed878d27d6e9bc82ea97d4efbaddd8c8a270822fd8999929d

    • SHA512

      3e3efa121b5c49e6ce73e0813261fae0cc03fa3f5fd41a938905c112961138aae5df4a8531df4f7ca24dc06350162eb0caa549851910bb278dbcbba5570abc33

    • SSDEEP

      24576:kaFcQrjgAfwWbpxdEJEEdkrOf8mbIzRjUEK6BiiQ0ThvIC05uB:kfQrjgAtmQm8mMz+EKAiiv1AWB

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot
    behavioral1

MITRE ATT&CK Matrix

Tasks