Extracted

• • Target

    CRA_INV_2019_541101959306/CRA_INV_2019_541101959306.vbs

  • Size

    23.7MB

  • MD5

    611c2bf7aa7bb62e90f3a92f3682c0b5

  • SHA1

    4a863046a56c0582ac43acabd7f465c725392799

  • SHA256

    f74001bcf33072d683af2fcd20b1e0f1902b86a33898b37df1f364c31136a4ee

  • SHA512

    24adbc4cf7ebed6ac6f5a9a08396d41af15f1d6586890d43be40dd6220f746bcd8ebf2d6bee4a8632a406842e8ece0afff4dfde2e58aabedd19ea15ee3984c60

  Score

  10^/10

  danabotbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2