Extracted

• • Target

    01911c2c5d240bf99089ba1296288140439fb0a35c3a468e2d119a4f94a76d4d

  • Size

    197KB

  • MD5

    566b85711405814185f3395067c9c256

  • SHA1

    48df247f7237ffc1f672a6370667a57bc78705a0

  • SHA256

    01911c2c5d240bf99089ba1296288140439fb0a35c3a468e2d119a4f94a76d4d

  • SHA512

    f66fc8094d220610211394169fee2cf836e666c43720419d23a0ffd2f683d5f8cf3985a938ae59b2d7276ba707bd07f1cf88012e083fe396a2cabc05fc2cc6c8

  • SSDEEP

    3072:Y3H6RLBM8naN5Nf5RzVM4Hl8FIpWxqVnfXKB/PBwc/PkkXx:5LRnEfHVM08FI0oXs

  Score

  10^/10

  danabotsmokeloaderbackdoorbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Detects Smokeloader packer

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  behavioral1