danabot | 3bdd87bfb09ed50bb6fb743d23c052aae947c420b5f64916216cd0c2d90109fc | Triage

Sharing

General

Target

3bdd87bfb09ed50bb6fb743d23c052aae947c420b5f64916216cd0c2d90109fc
Size

1.3MB
Sample

220924-j2t87sagg4
MD5

7a14f2a7902fd7f1199cf3adb6bc77e5
SHA1

2036574d84573d0399b2968dc32e5b52437ecdd5
SHA256

3bdd87bfb09ed50bb6fb743d23c052aae947c420b5f64916216cd0c2d90109fc
SHA512

c64b643ec38978c9ce4d810689b4eb9569d1f948c78434a0e469e4d9e597cb50c89f0d3b3b8bbe7e17735f9f40f2ed29ea88ea9958c5da33c7751e3502101324
SSDEEP

24576:1allXB6VDoqMmi044AKIYqAKqIZIXlYBrL+Jj6sxY0wDxML/R:UlD6VDoki0jNqA1IZaYl+j6sCo

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  3bdd87bfb09ed50bb6fb743d23c052aae947c420b5f64916216cd0c2d90109fc
- Size
  
  1.3MB
- MD5
  
  7a14f2a7902fd7f1199cf3adb6bc77e5
- SHA1
  
  2036574d84573d0399b2968dc32e5b52437ecdd5
- SHA256
  
  3bdd87bfb09ed50bb6fb743d23c052aae947c420b5f64916216cd0c2d90109fc
- SHA512
  
  c64b643ec38978c9ce4d810689b4eb9569d1f948c78434a0e469e4d9e597cb50c89f0d3b3b8bbe7e17735f9f40f2ed29ea88ea9958c5da33c7751e3502101324
- SSDEEP
  
  24576:1allXB6VDoqMmi044AKIYqAKqIZIXlYBrL+Jj6sxY0wDxML/R:UlD6VDoki0jNqA1IZaYl+j6sCo
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan