Extracted

• • Target

    6e0d8f278c5ab29c4b8ac4a1d27d8fc3.exe

  • Size

    6.1MB

  • MD5

    6e0d8f278c5ab29c4b8ac4a1d27d8fc3

  • SHA1

    03d1b12248b29688ccf13333f5e6e862a24856d8

  • SHA256

    41bbf76b420c467a35a7a8c7a92eca26881d71f52613cc967a9325202c6a0755

  • SHA512

    b9bd91cf0e67acdf6845420f2c4da6d0ab4f524406c1286fdaea5c6b47128eb25db04e705b18aef52a615277b99ef20b1fe2881fec06e67c222b68c62c4523c3

  Score

  10^/10

  danabot3bankerdiscoveryspywarestealertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Blocklisted process makes network request

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2