danabot | e2fcefc8cb739c0e8da7e3c605ccd851b6d958dadc47be23e08aa3b35992632e | Triage

Sharing

General

Target

e2fcefc8cb739c0e8da7e3c605ccd851b6d958dadc47be23e08aa3b35992632e
Size

1.3MB
Sample

220924-wel1jadadm
MD5

8be973f2c40d65cee775031acfce4c95
SHA1

b0842d327fbcc455d31d18e68c650605dffd79fe
SHA256

e2fcefc8cb739c0e8da7e3c605ccd851b6d958dadc47be23e08aa3b35992632e
SHA512

9aac64f997ce000a0000596443d199e1a1bcb7bc2a6397e25cd3ea4dfecae79534c62e6966440f10993441e2aaeda7c9be677081ad22c67a15ec297ad5cdd0a7
SSDEEP

24576:ycnH6cfP/vI32f9/W5mGZuTiHc+h1Jo47Z+XNG2eOfZvrF4cW:LHhH6OCLQKc+h1Jo4N+JegZrFR

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  e2fcefc8cb739c0e8da7e3c605ccd851b6d958dadc47be23e08aa3b35992632e
- Size
  
  1.3MB
- MD5
  
  8be973f2c40d65cee775031acfce4c95
- SHA1
  
  b0842d327fbcc455d31d18e68c650605dffd79fe
- SHA256
  
  e2fcefc8cb739c0e8da7e3c605ccd851b6d958dadc47be23e08aa3b35992632e
- SHA512
  
  9aac64f997ce000a0000596443d199e1a1bcb7bc2a6397e25cd3ea4dfecae79534c62e6966440f10993441e2aaeda7c9be677081ad22c67a15ec297ad5cdd0a7
- SSDEEP
  
  24576:ycnH6cfP/vI32f9/W5mGZuTiHc+h1Jo47Z+XNG2eOfZvrF4cW:LHhH6OCLQKc+h1Jo4N+JegZrFR
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan