VERY IMPORTANT

The Corebot malware family is relatively new and was first documented by Security Intelligence. Since then, it has evolved fairly rapidly and has added new capabilities, as reported. It now appears to be in the league of full-blown banking trojans such as Dyreza, Neverquest/Vawtrak, Zeus, etc. This report documents some of our recent findings regarding its cryptography, network behavior, and banking targets.