General
-
Target
66c284b62bd5b6640f4478761a690301.exe
-
Size
6.0MB
-
Sample
210609-rj91ydvd8a
-
MD5
66c284b62bd5b6640f4478761a690301
-
SHA1
c1a1d3feed660dc7194869fc2dbc9ae43370fe07
-
SHA256
0e9fb0a524be6d8ff7ca8704b42dcaa025c83247109b5d4e42b1384cf0308f07
-
SHA512
ee4e84d189beec51681573fa3b8d2661a9dd09c68b60f75596eb940bc1b8fd8bd1345f39fc29f93504eb2776317b6a0d1f11be9850215da554904b7152e1e45d
Static task
static1
Behavioral task
behavioral1
Sample
66c284b62bd5b6640f4478761a690301.exe
Resource
win7v20210410
Malware Config
Extracted
danabot
1827
3
184.95.51.175:443
184.95.51.183:443
192.210.198.12:443
37.220.31.52:443
-
embedded_hash
41DB94464223E2DE95BE6AE704AE054E
Targets
-
-
Target
66c284b62bd5b6640f4478761a690301.exe
-
Size
6.0MB
-
MD5
66c284b62bd5b6640f4478761a690301
-
SHA1
c1a1d3feed660dc7194869fc2dbc9ae43370fe07
-
SHA256
0e9fb0a524be6d8ff7ca8704b42dcaa025c83247109b5d4e42b1384cf0308f07
-
SHA512
ee4e84d189beec51681573fa3b8d2661a9dd09c68b60f75596eb940bc1b8fd8bd1345f39fc29f93504eb2776317b6a0d1f11be9850215da554904b7152e1e45d
-
Blocklisted process makes network request
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-