General
-
Target
60390700ea5a9533951e2bab7fde0bc63d92edcfc51eb7f7f4ad604c6a1a2735
-
Size
1.3MB
-
Sample
220924-s38bwsbee5
-
MD5
d5ff82d3d5af0038c162fe36b7e24111
-
SHA1
2f535994e0ccd205fd14cc69cb8864297f9152ff
-
SHA256
60390700ea5a9533951e2bab7fde0bc63d92edcfc51eb7f7f4ad604c6a1a2735
-
SHA512
f1ebfcdcb07fe4a88fd34c81628110724ea7a4eb6c0b54868ed2c969791b40a95966583904c4ddb56649f73c6a61d00334e56589131d1b27f96f3d2888932520
-
SSDEEP
24576:U4yO4QQ44wH+7Gq6YB4UQ+yO0xYIygwpc20ubgR:EQQ4mfl50x2gSBjbgR
Static task
static1
Malware Config
Extracted
danabot
198.15.112.179:443
185.62.56.245:443
153.92.223.225:443
192.119.70.159:443
49.0.50.0:57
51.0.52.0:0
53.0.54.0:1200
55.0.56.0:65535
-
embedded_hash
6618C163D57D6441FCCA65D86C4D380D
-
type
loader
Targets
-
-
Target
60390700ea5a9533951e2bab7fde0bc63d92edcfc51eb7f7f4ad604c6a1a2735
-
Size
1.3MB
-
MD5
d5ff82d3d5af0038c162fe36b7e24111
-
SHA1
2f535994e0ccd205fd14cc69cb8864297f9152ff
-
SHA256
60390700ea5a9533951e2bab7fde0bc63d92edcfc51eb7f7f4ad604c6a1a2735
-
SHA512
f1ebfcdcb07fe4a88fd34c81628110724ea7a4eb6c0b54868ed2c969791b40a95966583904c4ddb56649f73c6a61d00334e56589131d1b27f96f3d2888932520
-
SSDEEP
24576:U4yO4QQ44wH+7Gq6YB4UQ+yO0xYIygwpc20ubgR:EQQ4mfl50x2gSBjbgR
-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-