General

  • Target
    ae6a68f651c30d7c6c914114fa14aa0b.exe
  • Size 967KB
  • Sample220503-p7a1eaheaj
  • SHA256 f93628943add0691bc80e1db3cee114133ef839e820f50448b3082c46113cb6d
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • danabot

Attributes
  • type

    loader

Extracted

Family
  • danabot

Botnet
  • 7

C2
  • 192.236.176.108:443

  • 23.254.209.218:443

Attributes
  • embedded_hash

    FF16DCD8834CB7E04B2EEB3200331F40

  • type

    loader

Targets

    • Target
      ae6a68f651c30d7c6c914114fa14aa0b.exe
    • Size 967KB
    • SHA256 f93628943add0691bc80e1db3cee114133ef839e820f50448b3082c46113cb6d
    • MD5 SHA1 SHA512
    Score
    10/10
    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks