General
-
Target
7c549c5c5f00f656be14d1afd0a2d55e6d6a6fce23c534ee0c46f28fcfb8e3ba
-
Size
3.7MB
-
Sample
220319-y85qvahehl
-
MD5
977d5a4a6ea5697b1e7c8f2d20de1657
-
SHA1
9c1ccb233f89b5bd1e48a2f4f1ba8cee60ac702e
-
SHA256
7c549c5c5f00f656be14d1afd0a2d55e6d6a6fce23c534ee0c46f28fcfb8e3ba
-
SHA512
1d671e60a92b9ff9619255816b67bc01c6d4bd190e0dc50f5c2deb29d1013292e11d0cdae8097e9c0662e81ff97c84d35b17c4e151859cddc64258943c018925
Static task
static1
Behavioral task
behavioral1
Sample
7c549c5c5f00f656be14d1afd0a2d55e6d6a6fce23c534ee0c46f28fcfb8e3ba.dll
Resource
win7-20220310-en
Malware Config
Extracted
danabot
1732
3
104.227.34.227:443
64.188.20.187:443
192.241.101.68:443
167.114.188.63:443
-
embedded_hash
E1D3580C52F82AF2B3596E20FB85D9F4
-
type
main
Extracted
danabot
1732
197575
104.227.34.227:443
64.188.20.187:443
192.241.101.68:443
167.114.188.63:443
-
embedded_hash
E1D3580C52F82AF2B3596E20FB85D9F4
-
type
main
Targets
-
-
Target
7c549c5c5f00f656be14d1afd0a2d55e6d6a6fce23c534ee0c46f28fcfb8e3ba
-
Size
3.7MB
-
MD5
977d5a4a6ea5697b1e7c8f2d20de1657
-
SHA1
9c1ccb233f89b5bd1e48a2f4f1ba8cee60ac702e
-
SHA256
7c549c5c5f00f656be14d1afd0a2d55e6d6a6fce23c534ee0c46f28fcfb8e3ba
-
SHA512
1d671e60a92b9ff9619255816b67bc01c6d4bd190e0dc50f5c2deb29d1013292e11d0cdae8097e9c0662e81ff97c84d35b17c4e151859cddc64258943c018925
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-