danabot | b1fcbc373e3e3588b57ecfce0f3a4b1a742e9f190bb15f2010627586ea2376c5 | Triage

Sharing

General

Target

b1fcbc373e3e3588b57ecfce0f3a4b1a742e9f190bb15f2010627586ea2376c5
Size

1.3MB
Sample

220925-ts74tafda6
MD5

60d0d97aad1473cb10cd6799851505f6
SHA1

a5b15c63e22bbad2ea0d542ef944e249ed796169
SHA256

b1fcbc373e3e3588b57ecfce0f3a4b1a742e9f190bb15f2010627586ea2376c5
SHA512

cf782776882329e0f91592ae558bc279a4084a09dedbaeac5df6c27ac153e7ffba04f1cf610929016016506c7e0a78483c20cebd105aa33c779714887802e1cb
SSDEEP

24576:WWq2VZD3IN1fVLYoILTm/maCkZbUMsg7pxlcHFoig:TDD+V/UkZbfS

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  b1fcbc373e3e3588b57ecfce0f3a4b1a742e9f190bb15f2010627586ea2376c5
- Size
  
  1.3MB
- MD5
  
  60d0d97aad1473cb10cd6799851505f6
- SHA1
  
  a5b15c63e22bbad2ea0d542ef944e249ed796169
- SHA256
  
  b1fcbc373e3e3588b57ecfce0f3a4b1a742e9f190bb15f2010627586ea2376c5
- SHA512
  
  cf782776882329e0f91592ae558bc279a4084a09dedbaeac5df6c27ac153e7ffba04f1cf610929016016506c7e0a78483c20cebd105aa33c779714887802e1cb
- SSDEEP
  
  24576:WWq2VZD3IN1fVLYoILTm/maCkZbUMsg7pxlcHFoig:TDD+V/UkZbfS
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan