General
-
Target
02592e3a7db8dcd592f97df953bb5da2e1c820d2940dd718d8f2d3dee2a46982
-
Size
745KB
-
Sample
220528-fqq6mahhd7
-
MD5
dd4606ca506fb66087e6e97c8fd920d1
-
SHA1
4771b7578941ab9a7eb00d3dc5362887891a1bd6
-
SHA256
02592e3a7db8dcd592f97df953bb5da2e1c820d2940dd718d8f2d3dee2a46982
-
SHA512
229c02ae77e2200979a0be8a01ff0e0307480459bdc4cb6e8e1777afdfa8f51e4fa5fbc709c70fcfeb79d0152763c1350ef3370eb0257a2258239e2859d5c701
Static task
static1
Behavioral task
behavioral1
Sample
Receipt#2019#f678f6237b268dec93c753130a926cf31.vbs
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Receipt#2019#f678f6237b268dec93c753130a926cf31.vbs
Resource
win10v2004-20220414-en
Malware Config
Extracted
danabot
214.117.153.178
254.72.43.217
150.116.120.176
199.21.37.100
46.168.211.8
175.16.177.89
17.31.87.118
95.179.168.37
117.111.1.23
207.148.83.108
Targets
-
-
Target
Receipt#2019#f678f6237b268dec93c753130a926cf31.vbs
-
Size
4.9MB
-
MD5
f3ed87b32b193290549208db85679ca6
-
SHA1
ba83a0ec36bcf851b9a12bcaf545973f7499193c
-
SHA256
4747f8d0515a3209e45ffdb4fe25cf62f8b5db48faff4357362c45d56e25db83
-
SHA512
bcdcd1fa7b075d99ccb982ea81fef77fc6b51f10fd3e8f6be88f7abeb74f4f410d9752077233a71929520c4b9cd54c6ec770fb0e41ee178fd865252f446169e9
-
Danabot x86 payload
Detection of Danabot x86 payload, mapped in memory during the execution of its loader.
-
Blocklisted process makes network request
-
Loads dropped DLL
-