Overview

overview

10

Static

static

10

0x00080000...61.dll

windows7-x64

10

0x00080000...61.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0008000000014544-61.dat

  • Size

    2.4MB

  • Sample

    220916-y6aspageh6

  • MD5

    1500e3160f2d7bfde9d368d6865a250e

  • SHA1

    afe8d7ad9085cbc7538108546eb9f46d09c040fb

  • SHA256

    cbf71553c2dcb2ee0d9ad949877b61151d0374fb9f67cb3c5290d31c63c086dc

  • SHA512

    fff78aeb27f33bd64718743c64fd30af2bedd6fa85ada66e7ed3d1de569234b6664bb3bc2d156e507b50f76c5ba80396bc7a51ab7b0e017c81e4f4cb82ee91f9

  • SSDEEP

    24576:bvSq2/ajNsIu/45F0gKO8T7xb1oQC10ECAs9AD1PdKoL8GyIXBm3C2hTEN+4FOWT:bqqkrO8T7hgvgGyIEZTE0wOzkd

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

23.106.122.139:443
Attributes
  • embedded_hash

    0FA95F120D6EB149A5D48E36BC76879D

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      0x0008000000014544-61.dat

    • Size

      2.4MB

    • MD5

      1500e3160f2d7bfde9d368d6865a250e

    • SHA1

      afe8d7ad9085cbc7538108546eb9f46d09c040fb

    • SHA256

      cbf71553c2dcb2ee0d9ad949877b61151d0374fb9f67cb3c5290d31c63c086dc

    • SHA512

      fff78aeb27f33bd64718743c64fd30af2bedd6fa85ada66e7ed3d1de569234b6664bb3bc2d156e507b50f76c5ba80396bc7a51ab7b0e017c81e4f4cb82ee91f9

    • SSDEEP

      24576:bvSq2/ajNsIu/45F0gKO8T7xb1oQC10ECAs9AD1PdKoL8GyIXBm3C2hTEN+4FOWT:bqqkrO8T7hgvgGyIEZTE0wOzkd

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks