danabot | 026b3b22fb8666ed49e33d9dffb361aada2dc4470eded031487c0b5a4779d6dd | Triage

Sharing

General

Target

026b3b22fb8666ed49e33d9dffb361aada2dc4470eded031487c0b5a4779d6dd
Size

1.3MB
Sample

220924-mc5kesbaf2
MD5

6a71f70b1f3b524dfd7d487e3a9548dc
SHA1

05a6e768ceec54ec429de83e61e9bde1490486ec
SHA256

026b3b22fb8666ed49e33d9dffb361aada2dc4470eded031487c0b5a4779d6dd
SHA512

e7ab802b4a847bee11a77bb6f8cf3a2ba9145e799d1ca24219d40d870e9fe7488cc0dc97efeba10cb1ee2d86b8a1f5c8ed8d864d8a290763e245a5f0f4ec6115
SSDEEP

24576:SK1FsgSPrW6NbMJf7Xf1U1ocDmRkBUl3LZykgbcEoDPhRI8h1pRMdjjTXcPMQC:legSPrX4Jf7PO1RDmiOlV9gro7hRIkiF

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  026b3b22fb8666ed49e33d9dffb361aada2dc4470eded031487c0b5a4779d6dd
- Size
  
  1.3MB
- MD5
  
  6a71f70b1f3b524dfd7d487e3a9548dc
- SHA1
  
  05a6e768ceec54ec429de83e61e9bde1490486ec
- SHA256
  
  026b3b22fb8666ed49e33d9dffb361aada2dc4470eded031487c0b5a4779d6dd
- SHA512
  
  e7ab802b4a847bee11a77bb6f8cf3a2ba9145e799d1ca24219d40d870e9fe7488cc0dc97efeba10cb1ee2d86b8a1f5c8ed8d864d8a290763e245a5f0f4ec6115
- SSDEEP
  
  24576:SK1FsgSPrW6NbMJf7Xf1U1ocDmRkBUl3LZykgbcEoDPhRI8h1pRMdjjTXcPMQC:legSPrX4Jf7PO1RDmiOlV9gro7hRIkiF
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan