Extracted

• • Target

    2915f4d42ecd6891b7b021179b1f5a3e30021513083e965f81fb0026a195f186

  • Size

    248KB

  • MD5

    df942701dfde65f3efa4077812d7c10b

  • SHA1

    059e2106f023925a0daee47eec73aabcd61fedbc

  • SHA256

    2915f4d42ecd6891b7b021179b1f5a3e30021513083e965f81fb0026a195f186

  • SHA512

    14f26e2783ca96dc6ca072816a81d7ec38fec5f78fa5dafff2428ff0d062c0cf97ab54a76f2b8d577560aa42482ef43d324cfa88de6d6afc1dcd501a08125a95

  • SSDEEP

    6144:z686h7LNl/50Ujn6QzNqgPsNoJ6XhBIh2tN:mx7LP/50Ujn6Q/uoJ6x1

  Score

  10^/10

  danabotsmokeloaderbackdoorbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Detects Smokeloader packer

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1