General

  • Target

    904366DF569CA7DF61AAD19676B06D0254F8EE9EC1A11.dll

  • Size

    1.3MB

  • MD5

    0171fe3ceb93d3fabc91189fed1dcd63

  • SHA1

    6874b1c9221a7090e8ea270c6b81d7437b58e6a2

  • SHA256

    904366df569ca7df61aad19676b06d0254f8ee9ec1a11c18db5f8e784793e867

  • SHA512

    71fc3d4997c10a4f7e0c671757c970735206004c78a82b72a249927bd44996a8146a61113be03fa4b7a911a5bb9613c18067b1e73be8ec7d679ef52c7bd24ad4

Score
10/10

Malware Config

Extracted

Family

danabot

Botnet

4

C2

192.119.110.73:443

192.236.192.201:443

Attributes
  • embedded_hash

    F4711E27D559B4AEB1A081A1EB0AC465

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Signatures

  • Danabot Loader Component 1 IoCs
  • Danabot family

Files

  • 904366DF569CA7DF61AAD19676B06D0254F8EE9EC1A11.dll
    .dll windows x86

    f9e81afd2870aaecd8ace36b2893b1d3


    Code Sign

    Headers

    Imports

    Exports

    Sections