danabot | 2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5 | Triage

Sharing

General

Target

2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5
Size

1.3MB
Sample

220925-jv6zesdhb5
MD5

ed3c7179943462af3b79b62ce59b7ad5
SHA1

5b869c5f70c5a50014e431f3fca0b4efe6aef812
SHA256

2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5
SHA512

3a907731639048b23b8995e13dd0de4ca38fdea76d2bb1f07f82eee2ca382eb4408530dee2f482c89dee06af6a1966cccbf800b48e3cb9ed25d8952fb1732346
SSDEEP

24576:fErYJBXOFx6VGyd54z+pOTCrOGrWyUgxVNs74V76ZCTcteI3n+vy5np99ye:vBXOwGH+oTCrOGiyU2s787CCTcII3n+q

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5
- Size
  
  1.3MB
- MD5
  
  ed3c7179943462af3b79b62ce59b7ad5
- SHA1
  
  5b869c5f70c5a50014e431f3fca0b4efe6aef812
- SHA256
  
  2de605ca0185b5bbad3f5b19aa6a20d43c5fc3d01fde3717d5a445ff3e408ac5
- SHA512
  
  3a907731639048b23b8995e13dd0de4ca38fdea76d2bb1f07f82eee2ca382eb4408530dee2f482c89dee06af6a1966cccbf800b48e3cb9ed25d8952fb1732346
- SSDEEP
  
  24576:fErYJBXOFx6VGyd54z+pOTCrOGrWyUgxVNs74V76ZCTcteI3n+vy5np99ye:vBXOwGH+oTCrOGiyU2s787CCTcII3n+q
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan