Extracted

• • Target

    6937fe60697ed628fdee0a7cb4e6125e972062d86fe6b276b9cf0305b2a5d322

  • Size

    291KB

  • MD5

    045ec467d7df4abb4f5e95dbdfb37fef

  • SHA1

    d0a3c83f9a4b194bc27db75412fb803f6100abf1

  • SHA256

    6937fe60697ed628fdee0a7cb4e6125e972062d86fe6b276b9cf0305b2a5d322

  • SHA512

    5a1e0ffd550faee0549e9387e44b93d1beecafe9d5406a7b4bfddcc5165c197dfb2b76367271c43fa0f521f695f6654426054e58eb0e3a336c091c05e6d844cd

  • SSDEEP

    6144:a/MqLHC4IfAUYIe34TG30yIcOPCenigabwVf:a0qTCTvRe3crPti

  Score

  10^/10

  danabotbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  behavioral1