General
- Target file
- Size 316KB
- Sample220826-mg3xdsbbap
- SHA256 edae667e43eab2900b8e4b87dde097e111e04cae632500e66048cb19ec0ec120
- MD5 d9dd39c0a6d04d65f3f307147254463e
- SHA1 e7199f02dc122a45fce3a9110ac8acfbbe4ce050
- SHA512 4593ef4d2be64be66f1148282917b9b6d8387d628ad92d7dbed765c4c01072c4d900ba8d16aa2a5180f1636ce803b09d300a6cc89d1be1d4ffb6650f0e386422
- SSDEEP 6144:xk/erTKXlW3nyG2ln7POdOK9Bb46UEnJMFCeqCZk:xkr1Iy1lnqdOK746UmSFCnC
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
danabot
C2
-
23.254.226.20:443
-
198.15.112.179:443
-
66.85.147.23:443
Attributes
-
embedded_hash
8AA34A6CD5B6C9D509DB2C72E1AE6D88
-
type
loader
Targets
-
- Target file
- Size 316KB
- SHA256 edae667e43eab2900b8e4b87dde097e111e04cae632500e66048cb19ec0ec120
- MD5 d9dd39c0a6d04d65f3f307147254463e
- SHA1 e7199f02dc122a45fce3a9110ac8acfbbe4ce050
- SHA512 4593ef4d2be64be66f1148282917b9b6d8387d628ad92d7dbed765c4c01072c4d900ba8d16aa2a5180f1636ce803b09d300a6cc89d1be1d4ffb6650f0e386422
- SSDEEP 6144:xk/erTKXlW3nyG2ln7POdOK9Bb46UEnJMFCeqCZk:xkr1Iy1lnqdOK746UmSFCnC
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL