General
-
Target
112702ba79e81bed29a3ccfb8f6ffb6e.exe
-
Size
6.0MB
-
Sample
210608-nq8zzqhc8n
-
MD5
112702ba79e81bed29a3ccfb8f6ffb6e
-
SHA1
b2b004f5c17f55319deb2c9b66a22882d76760d0
-
SHA256
7fcbae85884dfc315b84bac9e450adea3effad99c3e40312a800141e374e682d
-
SHA512
88875b758b9ffc7a6918fe853e6b8f2c0f3ec4f789af1aca782aa1e5aad95ddebe24558db013465877191c96340cdf67f493c721992b232db37ff6890c96a617
Static task
static1
Behavioral task
behavioral1
Sample
112702ba79e81bed29a3ccfb8f6ffb6e.exe
Resource
win7v20210408
Malware Config
Extracted
danabot
1827
3
184.95.51.183:443
184.95.51.175:443
192.210.198.12:443
184.95.51.180:443
-
embedded_hash
AEF96B4D339B580ABB737F203C2D0F52
Targets
-
-
Target
112702ba79e81bed29a3ccfb8f6ffb6e.exe
-
Size
6.0MB
-
MD5
112702ba79e81bed29a3ccfb8f6ffb6e
-
SHA1
b2b004f5c17f55319deb2c9b66a22882d76760d0
-
SHA256
7fcbae85884dfc315b84bac9e450adea3effad99c3e40312a800141e374e682d
-
SHA512
88875b758b9ffc7a6918fe853e6b8f2c0f3ec4f789af1aca782aa1e5aad95ddebe24558db013465877191c96340cdf67f493c721992b232db37ff6890c96a617
-
Blocklisted process makes network request
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-