General

  • Target

    0x0008000000014544-61.dat

  • Size

    2.4MB

  • MD5

    1500e3160f2d7bfde9d368d6865a250e

  • SHA1

    afe8d7ad9085cbc7538108546eb9f46d09c040fb

  • SHA256

    cbf71553c2dcb2ee0d9ad949877b61151d0374fb9f67cb3c5290d31c63c086dc

  • SHA512

    fff78aeb27f33bd64718743c64fd30af2bedd6fa85ada66e7ed3d1de569234b6664bb3bc2d156e507b50f76c5ba80396bc7a51ab7b0e017c81e4f4cb82ee91f9

  • SSDEEP

    24576:bvSq2/ajNsIu/45F0gKO8T7xb1oQC10ECAs9AD1PdKoL8GyIXBm3C2hTEN+4FOWT:bqqkrO8T7hgvgGyIEZTE0wOzkd

Score
10/10

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.223:443

23.106.122.139:443

Attributes
  • embedded_hash

    0FA95F120D6EB149A5D48E36BC76879D

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Signatures

  • Danabot Loader Component 1 IoCs
  • Danabot family

Files

  • 0x0008000000014544-61.dat
    .dll windows x86

    52f2ef740c999752005bd9bf96068b1a


    Headers

    Imports

    Exports

    Sections