General
Target

1e0e448f97ce5a43facdae2ffec3d6a47fccea0810813045dfe633b0f88a8adb

Size

1MB

Sample

211119-abg2hsgcdn

Score
10/10
MD5

20452164317009d2812bd3c2b6dd3792

SHA1

228ca1c489d432b875d4a1a19f0aaed26c249ba0

SHA256

1e0e448f97ce5a43facdae2ffec3d6a47fccea0810813045dfe633b0f88a8adb

SHA512

c8c2340735a3a49d48090bcac43682b82cd67fc24b4d5f4615a9e40d33cbe9d46f43c28102a8abbaf2270e7f238f31b8cdd637c69cd0ebe318fe001302042676

Malware Config

Extracted

Family

danabot

C2

192.119.110.73:443

192.236.192.201:443

Attributes
embedded_hash
0FA95F120D6EB149A5D48E36BC76879D
type
loader
rsa_pubkey.plain
rsa_privkey.plain
Targets
Target

1e0e448f97ce5a43facdae2ffec3d6a47fccea0810813045dfe633b0f88a8adb

MD5

20452164317009d2812bd3c2b6dd3792

Filesize

1MB

Score
10/10
SHA1

228ca1c489d432b875d4a1a19f0aaed26c249ba0

SHA256

1e0e448f97ce5a43facdae2ffec3d6a47fccea0810813045dfe633b0f88a8adb

SHA512

c8c2340735a3a49d48090bcac43682b82cd67fc24b4d5f4615a9e40d33cbe9d46f43c28102a8abbaf2270e7f238f31b8cdd637c69cd0ebe318fe001302042676

Tags

Signatures

  • Danabot

    Description

    Danabot is a modular banking Trojan that has been linked with other malware.

    Tags

  • Danabot Loader Component

  • Loads dropped DLL

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          Score
                          N/A

                          behavioral1

                          Score
                          10/10