Overview

overview

10

Static

static

10

e622133a4b...74.dll

windows7_x64

10

e622133a4b...74.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e622133a4b171b64a719510893d8c3df4d881406c53401fd5276f3a354727b74

  • Size

    635KB

  • Sample

    220523-3s7mqahhg9

  • MD5

    49726f631ccad3cea76b226ffc034f34

  • SHA1

    a8e315b724bf1f7ca5b28f8379dd8d328d9cd97d

  • SHA256

    e622133a4b171b64a719510893d8c3df4d881406c53401fd5276f3a354727b74

  • SHA512

    e10e715c8b3485f65be56592724bd495640c1e3b81149120f83560e8cf5e1fb8492a94357dee49a5255e4b954bd8e5aa910219343fb704ab784063f211a965c2

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

192.71.249.51

74.232.183.171

185.92.222.238

250.167.47.171

185.243.192.194

134.126.169.33

196.240.19.6

5.165.130.110

184.100.10.165

213.165.88.166
rsa_pubkey.plain

Targets

    • Target

      e622133a4b171b64a719510893d8c3df4d881406c53401fd5276f3a354727b74

    • Size

      635KB

    • MD5

      49726f631ccad3cea76b226ffc034f34

    • SHA1

      a8e315b724bf1f7ca5b28f8379dd8d328d9cd97d

    • SHA256

      e622133a4b171b64a719510893d8c3df4d881406c53401fd5276f3a354727b74

    • SHA512

      e10e715c8b3485f65be56592724bd495640c1e3b81149120f83560e8cf5e1fb8492a94357dee49a5255e4b954bd8e5aa910219343fb704ab784063f211a965c2

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks