Overview

overview

10

Static

static

10

22e24d2ec0...c2.dll

windows7_x64

10

22e24d2ec0...c2.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22e24d2ec014638a674b94625117b0feded22f60d4b255df7c216705168a9dc2

  • Size

    1.4MB

  • Sample

    220612-d28tpsgfb3

  • MD5

    efdd7e7c76112ffdeb98643b8be683ce

  • SHA1

    2d57ff5fd14bd8afbe44fed327fb240a2c38d22b

  • SHA256

    22e24d2ec014638a674b94625117b0feded22f60d4b255df7c216705168a9dc2

  • SHA512

    cb539258996c99ea83c7333ecbcc4a1087e2e98f1b406c0d15e0e92a0a145a2e9e2a4f4e1f7638ac12d5ca3b8fec050e324140fd2a33f3ae1addcab31e44f57e

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

91.137.81.126

195.123.246.209

151.236.14.84

194.27.0.35

73.8.230.123

178.220.152.36

232.144.184.182

119.59.233.97

214.7.139.122

95.126.163.104
rsa_pubkey.plain

Targets

    • Target

      22e24d2ec014638a674b94625117b0feded22f60d4b255df7c216705168a9dc2

    • Size

      1.4MB

    • MD5

      efdd7e7c76112ffdeb98643b8be683ce

    • SHA1

      2d57ff5fd14bd8afbe44fed327fb240a2c38d22b

    • SHA256

      22e24d2ec014638a674b94625117b0feded22f60d4b255df7c216705168a9dc2

    • SHA512

      cb539258996c99ea83c7333ecbcc4a1087e2e98f1b406c0d15e0e92a0a145a2e9e2a4f4e1f7638ac12d5ca3b8fec050e324140fd2a33f3ae1addcab31e44f57e

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks