Extracted

• • Target

    f2edfdaf2a40a84e3ba165ed89b57ccb.exe

  • Size

    6.0MB

  • MD5

    f2edfdaf2a40a84e3ba165ed89b57ccb

  • SHA1

    aa478859d1812e6fd089cebf6635696e71746d2c

  • SHA256

    7e3d9139f86c0df6845784349667de273940b6f47edf998a7c41fe913054cb59

  • SHA512

    b9aa9ba4c9661f2f0ae07ec81eaaa90b2e2d291342f15932e88d6b9dae89208a144946cb4bf09a71fcd7892f2b3ec8de4e1cb169740705e77c6fb03a54c80654

  Score

  10^/10

  danabot3bankerdiscoveryspywarestealertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Blocklisted process makes network request

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops desktop.ini file(s)

  behavioral1behavioral2