Overview

overview

10

Static

static

98a08576db...b8.exe

windows7_x64

10

98a08576db...b8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98a08576dbfe72310c7d5fb1d97d1b2106936c71c56fd1211e6cf2b687826ab8

  • Size

    1008KB

  • Sample

    220523-3zsgdadefk

  • MD5

    feea92170affccbe4f0d404b1e96d170

  • SHA1

    85efd98b441a004c6bb22f965045c3dbbd67b31d

  • SHA256

    98a08576dbfe72310c7d5fb1d97d1b2106936c71c56fd1211e6cf2b687826ab8

  • SHA512

    6fe00756cac1211006fbe974ba8f0f5878599456b0c072a28698dfe46c3054a24415a30009f242538507efe2ad135da3fdb252005754509db5e122dc51696021

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

2.56.213.39

185.238.168.83

185.238.168.174

93.115.20.189

93.115.20.183

5.61.58.130
rsa_pubkey.plain

Targets

    • Target

      98a08576dbfe72310c7d5fb1d97d1b2106936c71c56fd1211e6cf2b687826ab8

    • Size

      1008KB

    • MD5

      feea92170affccbe4f0d404b1e96d170

    • SHA1

      85efd98b441a004c6bb22f965045c3dbbd67b31d

    • SHA256

      98a08576dbfe72310c7d5fb1d97d1b2106936c71c56fd1211e6cf2b687826ab8

    • SHA512

      6fe00756cac1211006fbe974ba8f0f5878599456b0c072a28698dfe46c3054a24415a30009f242538507efe2ad135da3fdb252005754509db5e122dc51696021

    Score
    10/10
    danabotbankerbotnettrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot x86 payload

      Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

      botnet

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks