2eb94760ca00f5c09688858b396f344d6b54abc561ff944102bc00cd12f86c38

General
Target

2eb94760ca00f5c09688858b396f344d6b54abc561ff944102bc00cd12f86c38

Size

1MB

Sample

220108-1wnynsdcc9

Score
10 /10
MD5

d6e4029b2351270c7be7db05bcf21955

SHA1

118f997dacf4f9dc9caccde527a0fa32341c5377

SHA256

2eb94760ca00f5c09688858b396f344d6b54abc561ff944102bc00cd12f86c38

SHA512

9682264c2d18edd44742a4ad666e7a651d6008ed27e576b71b23891154859f0abe19bceb4e7b5401e18b3d216fbce5391aef89ff3f0a7c0cef5559de38d7eb23

Malware Config

Extracted

Family danabot
Botnet 4
C2

192.119.110.4:443

103.175.16.113:443

Attributes
embedded_hash
422236FD601D11EE82825A484D26DD6F
type
loader
rsa_pubkey.plain
rsa_privkey.plain
Targets
Target

2eb94760ca00f5c09688858b396f344d6b54abc561ff944102bc00cd12f86c38

MD5

d6e4029b2351270c7be7db05bcf21955

Filesize

1MB

Score
10/10
SHA1

118f997dacf4f9dc9caccde527a0fa32341c5377

SHA256

2eb94760ca00f5c09688858b396f344d6b54abc561ff944102bc00cd12f86c38

SHA512

9682264c2d18edd44742a4ad666e7a651d6008ed27e576b71b23891154859f0abe19bceb4e7b5401e18b3d216fbce5391aef89ff3f0a7c0cef5559de38d7eb23

Tags

Signatures

  • Danabot

    Description

    Danabot is a modular banking Trojan that has been linked with other malware.

    Tags

  • Danabot Loader Component

  • Loads dropped DLL

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10