General

  • Target

    d85f98bbaf6a689437acd7b2e5a6b9c39b6aac0fb8f581712b7e6a196c100177

  • Size

    6.4MB

  • MD5

    4b66f96a90ec3d2ef76513bb175af221

  • SHA1

    72aaf36eac7348f05850a680b0eb3f92b4dfb02b

  • SHA256

    d85f98bbaf6a689437acd7b2e5a6b9c39b6aac0fb8f581712b7e6a196c100177

  • SHA512

    467376192083cc7c60eda4cec18565e4ae01dcee6a789a271f84d01e41ddb514d34aede4f49feecd693e7535e079f2be1f38433779564b625f77076ca91fde50

  • SSDEEP

    98304:nrNvXSNryXOog9B6Q4QlZIyFJK/uWbGEVGaVSPOlQBQ:nxvXSIXNuGTQW

Score
10/10

Malware Config

Extracted

Family

danabot

Version

1827

Botnet

3

C2

184.95.51.183:443

184.95.51.175:443

192.210.198.12:443

184.95.51.180:443

Attributes
  • embedded_hash

    AEF96B4D339B580ABB737F203C2D0F52

  • type

    main

rsa_pubkey.plain
rsa_pubkey.plain

Signatures

Files

  • d85f98bbaf6a689437acd7b2e5a6b9c39b6aac0fb8f581712b7e6a196c100177
    .dll windows x86

    f0f473e3486573f3ccf849ffec21164f


    Headers

    Imports

    Exports

    Sections