Danabot

Danabot is a modular banking Trojan that has been linked with other malware.

Danabot x86 payload

Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

Dharma

Dharma is a ransomware that uses security software installation to hide malicious activities.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

njRAT/Bladabindi

Widely used RAT written in .NET.

Deletes shadow copies

Ransomware often targets backup files to inhibit system recovery.

Renames multiple (501) files with added filename extension

This suggests ransomware activity of encrypting all the files on the system.

Blocklisted process makes network request

Downloads MZ/PE file

Modifies Windows Firewall