Six different banking Trojan families, including Ursnif, Dridex, Kronos, Zeus, Gootkit, and Vawtrak, are targeting customers of Canadian Financial Institutions

Six different banking Trojan families, including Ursnif, Dridex, Kronos, Zeus, Gootkit, and Vawtrak, are targeting customers of Canadian Financial Institutions:

IOC Type Description

c3fa5ae8e337e64154e96be03c82d22415068d9dbf8c188395f1a6cf777fa685 SHA256 Zeus Variant

fdbb6eba309812aeeb45fb6f0e103e80787975e2f6f8be2d41d95a44cf736707 SHA256 Document delivering the Zeus Variant

4cdbdd12d5270098d04e016912c0137ba37d95a234f6cc9091029ef407e8a193 SHA256 Vawtrak Project 21

aef39a4e0a5b5724dec5e65a7479cae711b65d21080e0de15c1235ff2951fa2b SHA256 Document delivering Vawtrak Project 21

b83f945c923b888a597fb7f1db205515cc3bb140bfcb2140a09b8595e5384e99 SHA256 Ursnif 1200

dafb4379504581c43c8fb0bf3c1724dc205e99599df5d03326eff9aa2f5e84ab SHA256 Document leading to download of Ursnif 1200

d945dcd6e3c1e3bff7536d5cf099780d9fdc7ad9efa31752e7b287dce66b194b SHA256 Ursnif 2003

53836f902e441f2c0981ffdba44f2e013d31c3da2d38bd26e68b0bebf10ea5ea SHA256 Document leading to download of Ursnif 2003

5cf89991284ffde6be3484be9f8f889b6d2e9cc3e251e21ef62ef2a06034c90b SHA256 Gootkit

9fe4292df260f4fac94f27154336a02fb45b5e8d8de31e60658c6c9bede9a9b8 SHA256 Document delivering Gootkit

0716a093c36f7d9b592cd294c4d2761c39af3251d6feca167ebde18758222e2e SHA256 Dridex Botnet 220

ad15d77430405baaf10424f895d91314d2272d28bd7d38aa84260ae57339342c SHA256 Document delivering Dridex 220

ae03cca0f7062bab07f50b02a0deecc5df6388b9e764ddc4439fbbcee72a4996 SHA256 Kronos

[hxxp://83.149.126[.]163/en-us/download/EVA-051616.EXE] URL URL leading to download of Kronos