danabot | 165edff10a7c2a2706e7c2106f5340a4131926536109cefe2031330ba18f5db9 | Triage

Sharing

General

Target

165edff10a7c2a2706e7c2106f5340a4131926536109cefe2031330ba18f5db9
Size

1.3MB
Sample

220925-s38yesgdhj
MD5

58a289df9216e6e2f0a8c2e1c5cc0c50
SHA1

f90b41276312cd38f309fd0ca78e44f0e987f64b
SHA256

165edff10a7c2a2706e7c2106f5340a4131926536109cefe2031330ba18f5db9
SHA512

d590194493bdcd0474a83663525ec995b5ebe1f576d0fac2e73f7b54ef3aad67144c756b383588e7150e8c5800da0d3948cb94b44da81bf5ec3997c4b0ebf98e
SSDEEP

24576:3JQJYhHajZu+VtuSLxcV1irOB+PCoqmrLMOqBD4nW2VYssNS2:Zew6dubxVv+PCoBL9k8nW2VYxNS

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  165edff10a7c2a2706e7c2106f5340a4131926536109cefe2031330ba18f5db9
- Size
  
  1.3MB
- MD5
  
  58a289df9216e6e2f0a8c2e1c5cc0c50
- SHA1
  
  f90b41276312cd38f309fd0ca78e44f0e987f64b
- SHA256
  
  165edff10a7c2a2706e7c2106f5340a4131926536109cefe2031330ba18f5db9
- SHA512
  
  d590194493bdcd0474a83663525ec995b5ebe1f576d0fac2e73f7b54ef3aad67144c756b383588e7150e8c5800da0d3948cb94b44da81bf5ec3997c4b0ebf98e
- SSDEEP
  
  24576:3JQJYhHajZu+VtuSLxcV1irOB+PCoqmrLMOqBD4nW2VYssNS2:Zew6dubxVv+PCoBL9k8nW2VYxNS
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan