Danabot

Danabot is a modular banking Trojan that has been linked with other malware.

Danabot x86 payload

Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

Blocklisted process makes network request

Downloads MZ/PE file

Suspicious Office macro

Office document equipped with 4.0 macros.