Overview

overview

10

Static

static

10

904366DF56...11.dll

windows7_x64

10

904366DF56...11.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    904366DF569CA7DF61AAD19676B06D0254F8EE9EC1A11.dll

  • Size

    1.3MB

  • Sample

    220314-v67wmscdgr

  • MD5

    0171fe3ceb93d3fabc91189fed1dcd63

  • SHA1

    6874b1c9221a7090e8ea270c6b81d7437b58e6a2

  • SHA256

    904366df569ca7df61aad19676b06d0254f8ee9ec1a11c18db5f8e784793e867

  • SHA512

    71fc3d4997c10a4f7e0c671757c970735206004c78a82b72a249927bd44996a8146a61113be03fa4b7a911a5bb9613c18067b1e73be8ec7d679ef52c7bd24ad4

Score
10/10
danabot4bankersuricatatrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

192.119.110.73:443

192.236.192.201:443
Attributes
  • embedded_hash

    F4711E27D559B4AEB1A081A1EB0AC465

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      904366DF569CA7DF61AAD19676B06D0254F8EE9EC1A11.dll

    • Size

      1.3MB

    • MD5

      0171fe3ceb93d3fabc91189fed1dcd63

    • SHA1

      6874b1c9221a7090e8ea270c6b81d7437b58e6a2

    • SHA256

      904366df569ca7df61aad19676b06d0254f8ee9ec1a11c18db5f8e784793e867

    • SHA512

      71fc3d4997c10a4f7e0c671757c970735206004c78a82b72a249927bd44996a8146a61113be03fa4b7a911a5bb9613c18067b1e73be8ec7d679ef52c7bd24ad4

    Score
    10/10
    danabot4bankersuricatatrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • suricata: ET MALWARE Danabot Key Exchange Request

      suricata: ET MALWARE Danabot Key Exchange Request

      suricata

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks