Ares (Windows)

First seen
2022-08-01 00:00:00
Malware type
trojan, credential-stealer
Family
Malware family
Profile updated
2026-07-07 14:44:57

Targeted industries: financial-services

Context

A banking trojan, derived from the source code of win.kronos. In August 2022 it started to incorporate DGA code from win.qakbot.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Ares (report)
  • zscaler.com — Ares Banking Trojan Learns Old Tricks Adds Defunct Qakbot Dga (report)
  • zscaler.com — Ares Malware Grandson Kronos Banking Trojan (report)

External references