Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Analysis

  • max time kernel
    74s
  • max time network
    72s
  • platform
    windows10-1703_x64
  • resource
    win10-20220901-en
  • resource tags

    arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system
  • submitted
    03-10-2022 07:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5de7892b10ca75a99513d0bbc1683d95d70ee9211fd5c860b64343890eb37266.exe

  • Size

    1.2MB

  • MD5

    cb435f2f141204ae5a455746fd587883

  • SHA1

    c01141e43623de67f27b5ffa633d65885cdec39a

  • SHA256

    5de7892b10ca75a99513d0bbc1683d95d70ee9211fd5c860b64343890eb37266

  • SHA512

    a5521cc005ee6a393b69345c18efd4cb22801734ced55dd329c400189ffe2e4fcb6054d69e3fb27ef449e3cf08b80f3a244a763b24ec085aab7b235827d67780

  • SSDEEP

    12288:gzC8Pf1hluCzuF85eEbsd2qgS5vyzCjSn2C3ttoV4eYir/qtnMHsWC2DWwwaZPDZ:CCK1w0m5WCjS2eq0iVCuyaZLIPYWi

Score
10/10
danabotbankertrojan

Malware Config

Extracted

Family

danabot

Attributes
  • embedded_hash

    F11D3871631E16E8DE15C24B32328D98

  • type

    loader

Signatures

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5de7892b10ca75a99513d0bbc1683d95d70ee9211fd5c860b64343890eb37266.exe
    "C:\Users\Admin\AppData\Local\Temp\5de7892b10ca75a99513d0bbc1683d95d70ee9211fd5c860b64343890eb37266.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:520
    • C:\Windows\SysWOW64\appidtel.exe
      C:\Windows\system32\appidtel.exe
      2⤵
        PID:4864

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/520-145-0x0000000002410000-0x0000000002533000-memory.dmp
      Filesize

      1.1MB

      Download
    • memory/520-126-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-122-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-123-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-124-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-125-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-147-0x0000000002600000-0x00000000028BB000-memory.dmp
      Filesize

      2.7MB

      Download
    • memory/520-127-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-128-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-129-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-130-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-148-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-132-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-133-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-134-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-135-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-136-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-137-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-138-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-139-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-120-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-142-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-143-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-144-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-140-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-121-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-131-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-146-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-149-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-151-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-150-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-152-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/520-169-0x0000000000400000-0x00000000006C7000-memory.dmp
      Filesize

      2.8MB

      Download
    • memory/520-168-0x0000000000400000-0x00000000006C7000-memory.dmp
      Filesize

      2.8MB

      Download
    • memory/520-167-0x0000000000400000-0x00000000006C7000-memory.dmp
      Filesize

      2.8MB

      Download
    • memory/520-166-0x0000000002600000-0x00000000028BB000-memory.dmp
      Filesize

      2.7MB

      Download
    • memory/520-158-0x0000000000400000-0x00000000006C7000-memory.dmp
      Filesize

      2.8MB

      Download
    • memory/4864-157-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-159-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-160-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-161-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-162-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-163-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-164-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-165-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-156-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-155-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-154-0x0000000077D60000-0x0000000077EEE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/4864-153-0x0000000000000000-mapping.dmp
      Download