danabot | 119912f20087b7c555c55bca5568e48017337e470d627b8b4ca59ec58dcaa2a8 | Triage

Sharing

General

Target

119912f20087b7c555c55bca5568e48017337e470d627b8b4ca59ec58dcaa2a8
Size

1.8MB
Sample

211229-24y92sdhfn
MD5

e7066761f02af9856d5e2942df990fb4
SHA1

1136c5c3c6aba64283024c7f2aec9e1fba5e110c
SHA256

119912f20087b7c555c55bca5568e48017337e470d627b8b4ca59ec58dcaa2a8
SHA512

e76c33112f48a4354561fcc0141bc36a0f6574c288fb2e7aa8d683da26482273a60fbc3f26a80c01bc75530dfe0475f22c2a1ad90cbfc633153d8bcedd09b087

Score

10^/10

danabot 4 banker trojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

192.236.194.72:443

Attributes

embedded_hash
0FA95F120D6EB149A5D48E36BC76879D
type
loader

rsa_pubkey.plain

rsa_privkey.plain

Targets

- Target
  
  119912f20087b7c555c55bca5568e48017337e470d627b8b4ca59ec58dcaa2a8
- Size
  
  1.8MB
- MD5
  
  e7066761f02af9856d5e2942df990fb4
- SHA1
  
  1136c5c3c6aba64283024c7f2aec9e1fba5e110c
- SHA256
  
  119912f20087b7c555c55bca5568e48017337e470d627b8b4ca59ec58dcaa2a8
- SHA512
  
  e76c33112f48a4354561fcc0141bc36a0f6574c288fb2e7aa8d683da26482273a60fbc3f26a80c01bc75530dfe0475f22c2a1ad90cbfc633153d8bcedd09b087
Score

10^/10

danabot 4 banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
- Loads dropped DLL
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabot4bankertrojan