Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d862c236bceec83922b1179e7b38ad89dc29d55b478d031e17c1d5a01f55874

  • Size

    269KB

  • Sample

    221009-wy58hshefn

  • MD5

    afa77851dfa878fa82de8dfd4184be3f

  • SHA1

    17fae8932cf8c98512c5895b2628820dd5e21395

  • SHA256

    5d862c236bceec83922b1179e7b38ad89dc29d55b478d031e17c1d5a01f55874

  • SHA512

    7b8c14c10585fd66e7bd174906cdfff5581b548e2df9832fcf60863e33083fbb971b844830f1c5155bff70dd10a4063c16bb79eea5cfbb097b34b41d184f58db

  • SSDEEP

    3072:+jXJH+hH7+5Pc6vFv5sb1sCVdHNMTj4lb/JP31HOMmBM/h3qpZa9uD6VdyhkhUux:+bRY76FmRsCVdHNQj4rJ4MmBrwVfquS

Score
10/10
danabotsmokeloaderbackdoorbankertrojan

Malware Config

Extracted

Family

danabot

Attributes
  • embedded_hash

    56951C922035D696BFCE443750496462

  • type

    loader

Targets

    • Target

      5d862c236bceec83922b1179e7b38ad89dc29d55b478d031e17c1d5a01f55874

    • Size

      269KB

    • MD5

      afa77851dfa878fa82de8dfd4184be3f

    • SHA1

      17fae8932cf8c98512c5895b2628820dd5e21395

    • SHA256

      5d862c236bceec83922b1179e7b38ad89dc29d55b478d031e17c1d5a01f55874

    • SHA512

      7b8c14c10585fd66e7bd174906cdfff5581b548e2df9832fcf60863e33083fbb971b844830f1c5155bff70dd10a4063c16bb79eea5cfbb097b34b41d184f58db

    • SSDEEP

      3072:+jXJH+hH7+5Pc6vFv5sb1sCVdHNMTj4lb/JP31HOMmBM/h3qpZa9uD6VdyhkhUux:+bRY76FmRsCVdHNQj4rJ4MmBrwVfquS

    Score
    10/10
    danabotsmokeloaderbackdoorbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks