danabot | 28e21a0685da31189bde48b5ff8bd76ebcfaf78ae924d8c6991e3efa8a884deb | Triage

Sharing

General

Target

28e21a0685da31189bde48b5ff8bd76ebcfaf78ae924d8c6991e3efa8a884deb
Size

1.3MB
Sample

220924-tfs45achel
MD5

38ba7056d233e336378d7d0f9228c9c4
SHA1

8ef3721c27c92928292af285b0e3f9a36e70668b
SHA256

28e21a0685da31189bde48b5ff8bd76ebcfaf78ae924d8c6991e3efa8a884deb
SHA512

2d95800224280634ccee934d91bdb2d307e39c794b10151b1caa8712f0c1cac12741d34e17fe8d2abf3706f0250e29b1f5f299cd59d3e64cb927ae534fffb508
SSDEEP

24576:x4pqX//Rdl1pbeYuv3ONAAYPcBIxVUB4eXOzYqMYP/FEQFVjnxEQ1FEj:DXbl1NelvTjPfUOk52WCJnxZ

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  28e21a0685da31189bde48b5ff8bd76ebcfaf78ae924d8c6991e3efa8a884deb
- Size
  
  1.3MB
- MD5
  
  38ba7056d233e336378d7d0f9228c9c4
- SHA1
  
  8ef3721c27c92928292af285b0e3f9a36e70668b
- SHA256
  
  28e21a0685da31189bde48b5ff8bd76ebcfaf78ae924d8c6991e3efa8a884deb
- SHA512
  
  2d95800224280634ccee934d91bdb2d307e39c794b10151b1caa8712f0c1cac12741d34e17fe8d2abf3706f0250e29b1f5f299cd59d3e64cb927ae534fffb508
- SSDEEP
  
  24576:x4pqX//Rdl1pbeYuv3ONAAYPcBIxVUB4eXOzYqMYP/FEQFVjnxEQ1FEj:DXbl1NelvTjPfUOk52WCJnxZ
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan