danabot | 3e83ffc07aba1a81fac2a85969c813581ff5083a1b17023bf87817cfba3c1bc8 | Triage

Sharing

General

Target

3e83ffc07aba1a81fac2a85969c813581ff5083a1b17023bf87817cfba3c1bc8
Size

1.3MB
Sample

220925-xa78msghhr
MD5

5e7f14e77375a2684af2efbf2f563e0e
SHA1

712ab6e9506e2d681e0f0a7d8bda6932f519153f
SHA256

3e83ffc07aba1a81fac2a85969c813581ff5083a1b17023bf87817cfba3c1bc8
SHA512

9dfead057ae2a253aaa33c030c6be68c3595fd604c80452fa713115bb724a4a55ebe812092ee29382a6de7979cefafe3e6da2e49bded0f3628829473de65cc27
SSDEEP

24576:J17E6Hri5ZlI3cj+4K/w9BR1jSQU0rVJhjHmrPZadY6JS+3vTCTKyyPRXCUW:f7E6HG5Zap4QqVHrhmrOJSWSVyPRV

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  3e83ffc07aba1a81fac2a85969c813581ff5083a1b17023bf87817cfba3c1bc8
- Size
  
  1.3MB
- MD5
  
  5e7f14e77375a2684af2efbf2f563e0e
- SHA1
  
  712ab6e9506e2d681e0f0a7d8bda6932f519153f
- SHA256
  
  3e83ffc07aba1a81fac2a85969c813581ff5083a1b17023bf87817cfba3c1bc8
- SHA512
  
  9dfead057ae2a253aaa33c030c6be68c3595fd604c80452fa713115bb724a4a55ebe812092ee29382a6de7979cefafe3e6da2e49bded0f3628829473de65cc27
- SSDEEP
  
  24576:J17E6Hri5ZlI3cj+4K/w9BR1jSQU0rVJhjHmrPZadY6JS+3vTCTKyyPRXCUW:f7E6HG5Zap4QqVHrhmrOJSWSVyPRV
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan