Extracted

• • Target

    0d61854433bd9993177f977182bb1a3c29a339029e969515362910dc12d7c5ff

  • Size

    1.4MB

  • MD5

    ad249734c9084190f4a7de38913a5d6a

  • SHA1

    a949eb32b55a621adc6f1471d5de85d1e8450e87

  • SHA256

    0d61854433bd9993177f977182bb1a3c29a339029e969515362910dc12d7c5ff

  • SHA512

    e4d7473529b98ce1a8e239d781a27b769d5565681c5b8f68d73a0321636137bbd87d57351bf8b144449669c0c780255e6ef814df8a21870ea935981f47014fe0

  • SSDEEP

    24576:QregzTQdvsek+yLJzKf3FF3Ys+w2hJ5P34cyjs9Q83z7v7SxEPHR:QqgzTOk+y1zyF3Ys/2Qjz83zb7EoH

  Score

  10^/10

  danabotbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Blocklisted process makes network request

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1