danabot | c5c1c33df5918f277b15d4716b1f02f6a9ad837299daeaa41dbaf44fc6df5f94 | Triage

Sharing

General

Target

c5c1c33df5918f277b15d4716b1f02f6a9ad837299daeaa41dbaf44fc6df5f94
Size

1.3MB
Sample

220925-qynqksgaen
MD5

067aad41e71338154cbdf14fc6f19687
SHA1

8c801d20bf8a8b6f99a7aff7277deee8e6d473dc
SHA256

c5c1c33df5918f277b15d4716b1f02f6a9ad837299daeaa41dbaf44fc6df5f94
SHA512

65f7dc1f15a7f195b9b9da4176dd89f6725b0d4050d9a46fc52d0004b8402601fd717acbf79e7babdce833a1c992262350e3c9c928b91e5b81f49c6200ca0b14
SSDEEP

24576:NXVP5gb3ELhVs+odxWYIkGGg6Nwu4BYl8ZBoLwUEhotcz3LtmJmob:iYlKdfRwLqLQhr3L

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  c5c1c33df5918f277b15d4716b1f02f6a9ad837299daeaa41dbaf44fc6df5f94
- Size
  
  1.3MB
- MD5
  
  067aad41e71338154cbdf14fc6f19687
- SHA1
  
  8c801d20bf8a8b6f99a7aff7277deee8e6d473dc
- SHA256
  
  c5c1c33df5918f277b15d4716b1f02f6a9ad837299daeaa41dbaf44fc6df5f94
- SHA512
  
  65f7dc1f15a7f195b9b9da4176dd89f6725b0d4050d9a46fc52d0004b8402601fd717acbf79e7babdce833a1c992262350e3c9c928b91e5b81f49c6200ca0b14
- SSDEEP
  
  24576:NXVP5gb3ELhVs+odxWYIkGGg6Nwu4BYl8ZBoLwUEhotcz3LtmJmob:iYlKdfRwLqLQhr3L
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan