Overview

overview

10

Static

static

D47A02152A...60.exe

windows7-x64

10

D47A02152A...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    D47A02152A9D2044647152905F91E918FB3DD97E2B760.exe

  • Size

    1.7MB

  • Sample

    220916-xzyqhagec7

  • MD5

    797d6206ba16b4d4814f24b087c1c02f

  • SHA1

    65410baf8d3862aef998db456512fd46624addea

  • SHA256

    d47a02152a9d2044647152905f91e918fb3dd97e2b7608feb58f7006ca071e31

  • SHA512

    96d4cc9acef984232f7a9d9584c4029785f2841dc3b2cfc73ccf7e79929dcd16e189aa13fa101a4a2edcec0d6c5baaa586667732b63d77e61344c3121543a836

  • SSDEEP

    24576:01FYt7Rh79rK04IgcdciWEyi1FYO8NH6BJFNMrQepRpIMvqbUbnNEYA5Y68mPOhn:iFAh7cZc+LZO8NHQEr/QM24o4

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

23.106.122.139:443
Attributes
  • embedded_hash

    0FA95F120D6EB149A5D48E36BC76879D

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      D47A02152A9D2044647152905F91E918FB3DD97E2B760.exe

    • Size

      1.7MB

    • MD5

      797d6206ba16b4d4814f24b087c1c02f

    • SHA1

      65410baf8d3862aef998db456512fd46624addea

    • SHA256

      d47a02152a9d2044647152905f91e918fb3dd97e2b7608feb58f7006ca071e31

    • SHA512

      96d4cc9acef984232f7a9d9584c4029785f2841dc3b2cfc73ccf7e79929dcd16e189aa13fa101a4a2edcec0d6c5baaa586667732b63d77e61344c3121543a836

    • SSDEEP

      24576:01FYt7Rh79rK04IgcdciWEyi1FYO8NH6BJFNMrQepRpIMvqbUbnNEYA5Y68mPOhn:iFAh7cZc+LZO8NHQEr/QM24o4

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks