danabot | c13e4751e60749c9f221b107efbc807514299c8452346f5fdf07de91fc47c7de | Triage

Sharing

General

Target

c13e4751e60749c9f221b107efbc807514299c8452346f5fdf07de91fc47c7de
Size

1.3MB
Sample

220924-z6qpkscaf4
MD5

0d04f4dcf1c8057b6ed68057444a68a8
SHA1

c5c089025aef15d1aaa13c746f597bcb57fc45ce
SHA256

c13e4751e60749c9f221b107efbc807514299c8452346f5fdf07de91fc47c7de
SHA512

46a42550b0996c9875f7e68afa21b32437f013d2b3a8db7b6965b86ded369c3ef9dfbcbbc11904c58456e1d5919dea897b1f59455ea77af016c901e43b0984b2
SSDEEP

24576:pWKyw5yKcZOf4HnqHcBt9mVc5HEzj3D5M4vAifzq2sgUuOks:x5yKcYUnqHc8+HWz5M4vAiukFs

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  c13e4751e60749c9f221b107efbc807514299c8452346f5fdf07de91fc47c7de
- Size
  
  1.3MB
- MD5
  
  0d04f4dcf1c8057b6ed68057444a68a8
- SHA1
  
  c5c089025aef15d1aaa13c746f597bcb57fc45ce
- SHA256
  
  c13e4751e60749c9f221b107efbc807514299c8452346f5fdf07de91fc47c7de
- SHA512
  
  46a42550b0996c9875f7e68afa21b32437f013d2b3a8db7b6965b86ded369c3ef9dfbcbbc11904c58456e1d5919dea897b1f59455ea77af016c901e43b0984b2
- SSDEEP
  
  24576:pWKyw5yKcZOf4HnqHcBt9mVc5HEzj3D5M4vAifzq2sgUuOks:x5yKcYUnqHc8+HWz5M4vAiukFs
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan