danabot | 19a36150ec5985dc5c4f4d2375750d6feea939f7738155c682f472fd54b33467 | Triage

Sharing

General

Target

19a36150ec5985dc5c4f4d2375750d6feea939f7738155c682f472fd54b33467
Size

1.2MB
Sample

220926-k81v1aacc5
MD5

b337bac94a5d98d2220e9e5accbca474
SHA1

a5744e210c23a5ee32692a68295b5c69ff89b7fc
SHA256

19a36150ec5985dc5c4f4d2375750d6feea939f7738155c682f472fd54b33467
SHA512

4bcf5479f6ed51416dacc94aee8ca08028d1d44f58edf5e5e293a9eb8c85b15f5c64666f135867bae043a11b8066f3c0d06496d8e375e6cd8b2d5f3d09fc2545
SSDEEP

24576:N/Y+wiZW4oQW4298n3HsiB1htH7G6PZARTm6/xllqnO+aehQDPvuSV:N/Y+wiZe4cQNB7NzA8gx7qnDakQrvRV

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  19a36150ec5985dc5c4f4d2375750d6feea939f7738155c682f472fd54b33467
- Size
  
  1.2MB
- MD5
  
  b337bac94a5d98d2220e9e5accbca474
- SHA1
  
  a5744e210c23a5ee32692a68295b5c69ff89b7fc
- SHA256
  
  19a36150ec5985dc5c4f4d2375750d6feea939f7738155c682f472fd54b33467
- SHA512
  
  4bcf5479f6ed51416dacc94aee8ca08028d1d44f58edf5e5e293a9eb8c85b15f5c64666f135867bae043a11b8066f3c0d06496d8e375e6cd8b2d5f3d09fc2545
- SSDEEP
  
  24576:N/Y+wiZW4oQW4298n3HsiB1htH7G6PZARTm6/xllqnO+aehQDPvuSV:N/Y+wiZe4cQNB7NzA8gx7qnDakQrvRV
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan