General
-
Target
48e97f899a1ba7c6663e93cdabe6326f00a76bcd12670d260395b74f26ad5cc7
-
Size
1.2MB
-
Sample
220926-yxq4babhf5
-
MD5
1a33c01cc2f7e837383ecdf7a488bf48
-
SHA1
59082b1d6d20c758ec252851c08053d4ce4dac70
-
SHA256
48e97f899a1ba7c6663e93cdabe6326f00a76bcd12670d260395b74f26ad5cc7
-
SHA512
aad6a612736aeba20e0a10b64f5dcccdf2bf69ec1597bb25713d6b39e0f3545cad39b8efa879a181dec252d6de6a3bb1bdbaaed33a52ab238add41402bd8f822
-
SSDEEP
24576:nf7hn4qgGGH4KdyQAbOrSXRvhIvzdr1LteyVn:TCbHfkQRGXRSbdZLDV
Static task
static1
Malware Config
Extracted
danabot
198.15.112.179:443
185.62.56.245:443
153.92.223.225:443
192.119.70.159:443
49.0.50.0:57
51.0.52.0:0
53.0.54.0:1200
55.0.56.0:65535
-
embedded_hash
6618C163D57D6441FCCA65D86C4D380D
-
type
loader
Targets
-
-
Target
48e97f899a1ba7c6663e93cdabe6326f00a76bcd12670d260395b74f26ad5cc7
-
Size
1.2MB
-
MD5
1a33c01cc2f7e837383ecdf7a488bf48
-
SHA1
59082b1d6d20c758ec252851c08053d4ce4dac70
-
SHA256
48e97f899a1ba7c6663e93cdabe6326f00a76bcd12670d260395b74f26ad5cc7
-
SHA512
aad6a612736aeba20e0a10b64f5dcccdf2bf69ec1597bb25713d6b39e0f3545cad39b8efa879a181dec252d6de6a3bb1bdbaaed33a52ab238add41402bd8f822
-
SSDEEP
24576:nf7hn4qgGGH4KdyQAbOrSXRvhIvzdr1LteyVn:TCbHfkQRGXRSbdZLDV
-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-