General
-
Target
e8491fbc18bf32d81726b1ac96b65109.exe
-
Size
6.0MB
-
Sample
210607-kjpt2hrj7x
-
MD5
e8491fbc18bf32d81726b1ac96b65109
-
SHA1
a043e831a9fdaea449570f3b303648a309c917ad
-
SHA256
d1558759d07ea0ed63c10d6569cca57d5ddb0db1c9f39902917ff71807eb417f
-
SHA512
1aa35682ba5b1d2375c3b17ac433873497ade157f3e0c2ee8a50e25240177e14268631101bb933ce812e6ef48bdbdb5e2a6b14cfa98580caaabceb4380528408
Static task
static1
Behavioral task
behavioral1
Sample
e8491fbc18bf32d81726b1ac96b65109.exe
Resource
win7v20210408
Malware Config
Extracted
danabot
1827
3
184.95.51.183:443
184.95.51.175:443
192.210.198.12:443
184.95.51.180:443
-
embedded_hash
AEF96B4D339B580ABB737F203C2D0F52
Targets
-
-
Target
e8491fbc18bf32d81726b1ac96b65109.exe
-
Size
6.0MB
-
MD5
e8491fbc18bf32d81726b1ac96b65109
-
SHA1
a043e831a9fdaea449570f3b303648a309c917ad
-
SHA256
d1558759d07ea0ed63c10d6569cca57d5ddb0db1c9f39902917ff71807eb417f
-
SHA512
1aa35682ba5b1d2375c3b17ac433873497ade157f3e0c2ee8a50e25240177e14268631101bb933ce812e6ef48bdbdb5e2a6b14cfa98580caaabceb4380528408
-
Blocklisted process makes network request
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-