Overview

overview

10

Static

static

7d30ac3453...d1.exe

windows7_x64

10

7d30ac3453...d1.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d30ac3453d7645e22358d271de20f0ab32c8146acfb927725f06c035e5a7fd1

  • Size

    1.1MB

  • Sample

    220524-t97vdadfhq

  • MD5

    22c5aefc1b583d372e9a71a5679faa39

  • SHA1

    a519c7416d8190ebba2f71fa5152ad6301dd7886

  • SHA256

    7d30ac3453d7645e22358d271de20f0ab32c8146acfb927725f06c035e5a7fd1

  • SHA512

    6880f18674bbb3b4b89938129676ca5aa2b6cdd80e59892729b378f4f9d5c6281ba6ee213ccc0a50ca68b16c061b08b1b947387dc6693f8760255efe56d6fd2e

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

2.56.213.39

185.238.168.83

185.238.168.174

93.115.20.189

93.115.20.183

5.61.58.130
rsa_pubkey.plain

Targets

    • Target

      7d30ac3453d7645e22358d271de20f0ab32c8146acfb927725f06c035e5a7fd1

    • Size

      1.1MB

    • MD5

      22c5aefc1b583d372e9a71a5679faa39

    • SHA1

      a519c7416d8190ebba2f71fa5152ad6301dd7886

    • SHA256

      7d30ac3453d7645e22358d271de20f0ab32c8146acfb927725f06c035e5a7fd1

    • SHA512

      6880f18674bbb3b4b89938129676ca5aa2b6cdd80e59892729b378f4f9d5c6281ba6ee213ccc0a50ca68b16c061b08b1b947387dc6693f8760255efe56d6fd2e

    Score
    10/10
    danabotbankerbotnettrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot x86 payload

      Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

      botnet

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks