Extracted

• • Target

    ac2ff361585625b8f1988e20ef00acf25d40f5b43c6025018bb8c2b96fd8b049

  • Size

    196KB

  • MD5

    7be05ae221e8cff71446c75ce04a0bed

  • SHA1

    aa2ff15284e855cc5d123bedd82cef78c3b4a115

  • SHA256

    ac2ff361585625b8f1988e20ef00acf25d40f5b43c6025018bb8c2b96fd8b049

  • SHA512

    82d5a4d9e434bd6944387b768064713ce964dfa6822c7d575fdedda8a0832f7e9be7b7f01b752a44365526e07281a8048e7a3dc0c05aa593dfc7db33f20abe07

  • SSDEEP

    3072:R0pP9L3M0xaA5TgUSQYsUKvTEmriIzBWrAFG7BZVlCc/Pkk4x:uLPxVh5TzriIzBWrAx

  Score

  10^/10

  danabotbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  behavioral1