Overview

overview

10

Static

static

201715e350...d5.exe

windows7_x64

10

201715e350...d5.exe

windows10-2004_x64

10

Resubmissions

03/05/2022, 13:04

220503-qbdbbshfdk8

25/04/2022, 15:50

220425-s9x5haggej8

Sharing

Copy URL Twitter E-mail

General

  • Target
    201715e350439f6d19ce61769e5bb8d5.exe
  • Size 1.0MB
  • Sample220503-qbdbbshfdk
  • SHA256 35bb9fb5b4801c32caa7c9b1d178f6a11d88cf849394333d450d9fc36dac0c1f
  • MD5 SHA1 SHA512
Score
10/10
danabot6bankertrojan

Malware Config

Extracted

Family

  • danabot

Botnet

  • 6

C2

  • 192.236.160.249:443

  • 104.168.234.51:443

  • 23.254.161.215:443

  • 192.236.147.212:443

Attributes
  • embedded_hash

    A471231BC0846BE9EFCDD39DCBA967C5

  • type

    loader

Extracted

Family

  • danabot

Attributes
  • type

    loader

Targets

    • Target
      201715e350439f6d19ce61769e5bb8d5.exe
    • Size 1.0MB
    • SHA256 35bb9fb5b4801c32caa7c9b1d178f6a11d88cf849394333d450d9fc36dac0c1f
    • MD5 SHA1 SHA512
    Score
    10/10
    danabot6bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks