General
-
Target
bcb63e4a5a3e6c28a50cfbb38c6693e6.exe
-
Size
6.0MB
-
Sample
210607-jmg94mh58j
-
MD5
bcb63e4a5a3e6c28a50cfbb38c6693e6
-
SHA1
479f3eb31c88c4a0ea675cd71b3b8fbe0f1c71a3
-
SHA256
6f24544c9019877bb7357882dedcd2916c6ba37347503027462afabbe6c69e91
-
SHA512
fd94582147ef86ce1f88819a524d23ad995b3cf0ef46cb993ecc1be20d2b02fc7d4847c2fc062323b3d28dd8524d64ce653e8e52e4f32c42a5d71416d264df1f
Static task
static1
Behavioral task
behavioral1
Sample
bcb63e4a5a3e6c28a50cfbb38c6693e6.exe
Resource
win7v20210408
Malware Config
Extracted
danabot
1827
3
184.95.51.183:443
184.95.51.175:443
192.210.198.12:443
184.95.51.180:443
-
embedded_hash
AEF96B4D339B580ABB737F203C2D0F52
Targets
-
-
Target
bcb63e4a5a3e6c28a50cfbb38c6693e6.exe
-
Size
6.0MB
-
MD5
bcb63e4a5a3e6c28a50cfbb38c6693e6
-
SHA1
479f3eb31c88c4a0ea675cd71b3b8fbe0f1c71a3
-
SHA256
6f24544c9019877bb7357882dedcd2916c6ba37347503027462afabbe6c69e91
-
SHA512
fd94582147ef86ce1f88819a524d23ad995b3cf0ef46cb993ecc1be20d2b02fc7d4847c2fc062323b3d28dd8524d64ce653e8e52e4f32c42a5d71416d264df1f
-
Blocklisted process makes network request
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-