Overview

overview

10

Static

static

dan777.bin.exe

windows7_x64

10

dan777.bin.exe

windows10_x64

10

Resubmissions

08-10-2020 10:50

201008-e8qrqmf3ze 10

08-10-2020 10:38

201008-88hf9vxww6 10

08-10-2020 09:34

201008-pjmzjspx2n 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dan777.bin

  • Size

    2.3MB

  • Sample

    201008-pjmzjspx2n

  • MD5

    565a67a6dff8d567038d9fe8c7fa0024

  • SHA1

    a3f8c5b142a8fbeb72664d521dfe91e4939eaffe

  • SHA256

    de146c4ebb0ba2850b93cb358f78b671f50724c9710127d6755c1c2f2f23d698

  • SHA512

    f075b5ebf4ff35ce85ba5cf15ebfb3da760a67daa23c294545630c1d1a62d02a5282c5a24b82fd9fc5285ce68b6e6b79185c6e8812e882a058ae3ee3ca555022

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

73.48.92.89

193.144.40.26

219.30.45.197

95.179.168.37

151.236.14.84

142.181.133.99

234.63.35.120

74.12.197.16

85.229.148.210

117.69.242.3
rsa_pubkey.plain

Targets

    • Target

      dan777.bin

    • Size

      2.3MB

    • MD5

      565a67a6dff8d567038d9fe8c7fa0024

    • SHA1

      a3f8c5b142a8fbeb72664d521dfe91e4939eaffe

    • SHA256

      de146c4ebb0ba2850b93cb358f78b671f50724c9710127d6755c1c2f2f23d698

    • SHA512

      f075b5ebf4ff35ce85ba5cf15ebfb3da760a67daa23c294545630c1d1a62d02a5282c5a24b82fd9fc5285ce68b6e6b79185c6e8812e882a058ae3ee3ca555022

    Score
    10/10
    danabotbankerbotnettrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot x86 payload

      Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

      botnet

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks