danabot | dd8f4f5fba1053b26b3622f83917751fc4513f3af73dafda36d4dbd33c732028 | Triage

Sharing

General

Target

dd8f4f5fba1053b26b3622f83917751fc4513f3af73dafda36d4dbd33c732028
Size

1.3MB
Sample

220923-hlznbadde7
MD5

1c4b7ed2eb6ce196468f88be8a163f59
SHA1

978a72fde9c7dbfd7f660714bbc81c3cd5231735
SHA256

dd8f4f5fba1053b26b3622f83917751fc4513f3af73dafda36d4dbd33c732028
SHA512

111ba7fb637f4c02d08a750f656d16aacddd42e328784a330ecfb936a6e68b7b24a5e8be10a313ea943dbc45d9cf1b06c656ed548462719b101ecaad0de1d119
SSDEEP

24576:9nOHlC9jLVh+MuCuSRpwQXU0kgMQw9TD49oD:tOnBSUXQw9SoD

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  dd8f4f5fba1053b26b3622f83917751fc4513f3af73dafda36d4dbd33c732028
- Size
  
  1.3MB
- MD5
  
  1c4b7ed2eb6ce196468f88be8a163f59
- SHA1
  
  978a72fde9c7dbfd7f660714bbc81c3cd5231735
- SHA256
  
  dd8f4f5fba1053b26b3622f83917751fc4513f3af73dafda36d4dbd33c732028
- SHA512
  
  111ba7fb637f4c02d08a750f656d16aacddd42e328784a330ecfb936a6e68b7b24a5e8be10a313ea943dbc45d9cf1b06c656ed548462719b101ecaad0de1d119
- SSDEEP
  
  24576:9nOHlC9jLVh+MuCuSRpwQXU0kgMQw9TD49oD:tOnBSUXQw9SoD
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan