Overview

overview

10

Static

static

10

e9601c830f...11.dll

windows7_x64

10

e9601c830f...11.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9601c830f3417f81beb5e8364a69a08a5aadf34eae49f88040ea2e5b0de7a11

  • Size

    589KB

  • Sample

    220508-h7vw9adhcn

  • MD5

    82b6710f9a208f3fbf128e21d58b3d50

  • SHA1

    92c998953fa8dc4fd8a2d9548e80ea3789752b81

  • SHA256

    e9601c830f3417f81beb5e8364a69a08a5aadf34eae49f88040ea2e5b0de7a11

  • SHA512

    2aaedab4cbc0200a1d8535fddc79fbd1f2b26d438b46fd39de532e1eb791641d033be1684262e259f97a0d97d7aaf2cb61a4d1cdd5998e35a8adf793b0936686

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

10.189.64.123

89.144.25.104

106.137.226.19

233.175.187.96

67.248.84.113

178.209.51.211

157.64.238.1

252.12.144.26

84.19.37.39

44.202.197.21
rsa_pubkey.plain

Targets

    • Target

      e9601c830f3417f81beb5e8364a69a08a5aadf34eae49f88040ea2e5b0de7a11

    • Size

      589KB

    • MD5

      82b6710f9a208f3fbf128e21d58b3d50

    • SHA1

      92c998953fa8dc4fd8a2d9548e80ea3789752b81

    • SHA256

      e9601c830f3417f81beb5e8364a69a08a5aadf34eae49f88040ea2e5b0de7a11

    • SHA512

      2aaedab4cbc0200a1d8535fddc79fbd1f2b26d438b46fd39de532e1eb791641d033be1684262e259f97a0d97d7aaf2cb61a4d1cdd5998e35a8adf793b0936686

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks