danabot | c14de788a761dfd477739bdfe4b5879e8ef13027bb1325741ac05414908b63fe | Triage

Sharing

General

Target

c14de788a761dfd477739bdfe4b5879e8ef13027bb1325741ac05414908b63fe
Size

1.2MB
Sample

220926-kmbzrabcer
MD5

81735609cd3f79775e72f0f8159c6b05
SHA1

b7d5bf75c2a081b0718ac2dcce1c67699a6303bd
SHA256

c14de788a761dfd477739bdfe4b5879e8ef13027bb1325741ac05414908b63fe
SHA512

093f8bb8f3cb2d3cb184a76f3ab17b3398a568bdbedfd4f29a98c9fa32d8e932f26fe1ee41658070c6569f0cd793bde9c00cf7dd6c814ba6067716f11340939b
SSDEEP

24576:TmPoE/J5AlZQtk51tMiRJaxXdtFeL+I/eVGoGuN6Q+N+i:TmPofHOk51tM4wLq+wQtaQ+k

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

198.15.112.179:443

185.62.56.245:443

153.92.223.225:443

192.119.70.159:443

Attributes

embedded_hash
6618C163D57D6441FCCA65D86C4D380D
type
loader

Targets

- Target
  
  c14de788a761dfd477739bdfe4b5879e8ef13027bb1325741ac05414908b63fe
- Size
  
  1.2MB
- MD5
  
  81735609cd3f79775e72f0f8159c6b05
- SHA1
  
  b7d5bf75c2a081b0718ac2dcce1c67699a6303bd
- SHA256
  
  c14de788a761dfd477739bdfe4b5879e8ef13027bb1325741ac05414908b63fe
- SHA512
  
  093f8bb8f3cb2d3cb184a76f3ab17b3398a568bdbedfd4f29a98c9fa32d8e932f26fe1ee41658070c6569f0cd793bde9c00cf7dd6c814ba6067716f11340939b
- SSDEEP
  
  24576:TmPoE/J5AlZQtk51tMiRJaxXdtFeL+I/eVGoGuN6Q+N+i:TmPofHOk51tM4wLq+wQtaQ+k
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan