General
-
Target
af614b3f803df5c0847848ed6844dd38.exe
-
Size
6.0MB
-
Sample
210602-9wecfx9qds
-
MD5
af614b3f803df5c0847848ed6844dd38
-
SHA1
7b3df2fc2f396d09ded9774965c2339d7024b034
-
SHA256
1c14bddb487a062c0a169313a68281d7ce8dca8b49c5fa1561d90a7374bcd579
-
SHA512
dabf50f4679918c441e50688b93d336e65690168d1f05529c1498230f7001eb329df7065b6218bce31ccfd78b8e95ce4fabed8b49f7682363d5d9b088bce5d62
Static task
static1
Behavioral task
behavioral1
Sample
af614b3f803df5c0847848ed6844dd38.exe
Resource
win7v20210410
Malware Config
Extracted
danabot
1827
3
184.95.51.183:443
184.95.51.175:443
192.210.198.12:443
184.95.51.180:443
-
embedded_hash
AEF96B4D339B580ABB737F203C2D0F52
Targets
-
-
Target
af614b3f803df5c0847848ed6844dd38.exe
-
Size
6.0MB
-
MD5
af614b3f803df5c0847848ed6844dd38
-
SHA1
7b3df2fc2f396d09ded9774965c2339d7024b034
-
SHA256
1c14bddb487a062c0a169313a68281d7ce8dca8b49c5fa1561d90a7374bcd579
-
SHA512
dabf50f4679918c441e50688b93d336e65690168d1f05529c1498230f7001eb329df7065b6218bce31ccfd78b8e95ce4fabed8b49f7682363d5d9b088bce5d62
-
Blocklisted process makes network request
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-