danabot | 3c652e59c845cb56e05c3a733c8fe69cd2b221caa97163bc6c34188ceca80c39 | Triage

Resubmissions

17-01-2022 21:35

220117-1ffblacfg3 10

13-01-2022 17:03

220113-vkxtjsbfg2 10

Sharing

General

Target

3c652e59c845cb56e05c3a733c8fe69cd2b221caa97163bc6c34188ceca80c39
Size

1.1MB
Sample

220113-vkxtjsbfg2
MD5

9cfc084f1d179442058a82259a414984
SHA1

4b0a400655a9545f7ba95640afe395b7d076d48c
SHA256

3c652e59c845cb56e05c3a733c8fe69cd2b221caa97163bc6c34188ceca80c39
SHA512

4cb0fbd8b91ce3e3da9a1950b63bf4204d3bf0dd651009987453f15499d1b9c28f33180fd13fc957f7e63d7c72a78b757eec9a3d7d2dff0a7f755218257b4241

Score

10^/10

danabot 4 banker trojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

103.175.16.113:443

103.175.16.114:443

Attributes

embedded_hash
422236FD601D11EE82825A484D26DD6F
type
loader

rsa_pubkey.plain

rsa_privkey.plain

Targets

- Target
  
  3c652e59c845cb56e05c3a733c8fe69cd2b221caa97163bc6c34188ceca80c39
- Size
  
  1.1MB
- MD5
  
  9cfc084f1d179442058a82259a414984
- SHA1
  
  4b0a400655a9545f7ba95640afe395b7d076d48c
- SHA256
  
  3c652e59c845cb56e05c3a733c8fe69cd2b221caa97163bc6c34188ceca80c39
- SHA512
  
  4cb0fbd8b91ce3e3da9a1950b63bf4204d3bf0dd651009987453f15499d1b9c28f33180fd13fc957f7e63d7c72a78b757eec9a3d7d2dff0a7f755218257b4241
Score

10^/10

danabot 4 banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
- Danabot Loader Component
- Loads dropped DLL
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabot4bankertrojan