danabot | cc4c11f8e7599cef56fe6ca5b62121dd9b361d7cd5efb90c0144314e6d98a41a | Triage

Sharing

General

Target

cc4c11f8e7599cef56fe6ca5b62121dd9b361d7cd5efb90c0144314e6d98a41a
Size

1.1MB
Sample

220106-ppmw9abfbq
MD5

2e49f97a5a97ba0448bc259241398bef
SHA1

60327dc3e621f25117bc2562f2eb76cc110fca2b
SHA256

cc4c11f8e7599cef56fe6ca5b62121dd9b361d7cd5efb90c0144314e6d98a41a
SHA512

440fe729652ef9f8f0e0af31f468dba28247d47e056feef7932498f93bf56046f0d1c9540b9602965ffe08fdb1944b0bb5da235ca3d9ca270b770c3f2b667c9c

Score

10^/10

danabot 4 banker trojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

192.236.194.72:443

192.119.110.4:443

Attributes

embedded_hash
8357B947FCA843DB2D85EC29EDCDEF3C
type
loader

rsa_pubkey.plain

rsa_privkey.plain

Targets

- Target
  
  cc4c11f8e7599cef56fe6ca5b62121dd9b361d7cd5efb90c0144314e6d98a41a
- Size
  
  1.1MB
- MD5
  
  2e49f97a5a97ba0448bc259241398bef
- SHA1
  
  60327dc3e621f25117bc2562f2eb76cc110fca2b
- SHA256
  
  cc4c11f8e7599cef56fe6ca5b62121dd9b361d7cd5efb90c0144314e6d98a41a
- SHA512
  
  440fe729652ef9f8f0e0af31f468dba28247d47e056feef7932498f93bf56046f0d1c9540b9602965ffe08fdb1944b0bb5da235ca3d9ca270b770c3f2b667c9c
Score

10^/10

danabot 4 banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
- Loads dropped DLL
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabot4bankertrojan