General
-
Target
650c7f3d80b1727d98ecdddfb80a4325.exe
-
Size
6.1MB
-
Sample
210615-mqnx3nkb7a
-
MD5
650c7f3d80b1727d98ecdddfb80a4325
-
SHA1
287a83aefe7a0f9df55490934d9ee90f9255f09f
-
SHA256
9a474c4103304066f985404de874352eb3ad3bd4a313494373a3c296b088ae88
-
SHA512
010aa6732ac8adde1f3c4281c7d50312e561cdddc191846448877cefac8538358ba7c1ada411004be722b517ab14e3d04b93041d353a0a21fc9ef4d1151cac4b
Static task
static1
Behavioral task
behavioral1
Sample
650c7f3d80b1727d98ecdddfb80a4325.exe
Resource
win7v20210408
Malware Config
Extracted
danabot
1827
3
192.210.198.12:443
37.220.31.50:443
184.95.51.183:443
184.95.51.175:443
-
embedded_hash
410EB249B3A3D8613B29638D583F7193
Targets
-
-
Target
650c7f3d80b1727d98ecdddfb80a4325.exe
-
Size
6.1MB
-
MD5
650c7f3d80b1727d98ecdddfb80a4325
-
SHA1
287a83aefe7a0f9df55490934d9ee90f9255f09f
-
SHA256
9a474c4103304066f985404de874352eb3ad3bd4a313494373a3c296b088ae88
-
SHA512
010aa6732ac8adde1f3c4281c7d50312e561cdddc191846448877cefac8538358ba7c1ada411004be722b517ab14e3d04b93041d353a0a21fc9ef4d1151cac4b
-
Blocklisted process makes network request
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-