General

  • Target

    14821f9b31583a9788901356951261d26beb4ed3f6512eab7496b415850e204b

  • Size

    1.2MB

  • Sample

    221002-c1znzafbh3

  • MD5

    938b698b9ecd520b6aa677ea22041580

  • SHA1

    7d9da8481667f61462828a6c1b353226a42dec6e

  • SHA256

    14821f9b31583a9788901356951261d26beb4ed3f6512eab7496b415850e204b

  • SHA512

    460d2aaf608f116466e94e36a515300b00755ef0c9958d358767733018c170e8a3349b50624a1df007c680c0ae39b7c6684e51f0601e1331dff156ac7e7a0abe

  • SSDEEP

    24576:NTsK6OOZ1yS+nLtzPlrTkp6gaF17sQl33l18bh+Ind:CyS+nJblrTl17sQlsbhln

Score
10/10

Malware Config

Extracted

Family

danabot

C2

192.236.233.188:443

192.119.70.159:443

23.106.124.171:443

Attributes
  • embedded_hash

    F11D3871631E16E8DE15C24B32328D98

  • type

    loader

Targets

    • Target

      14821f9b31583a9788901356951261d26beb4ed3f6512eab7496b415850e204b

    • Size

      1.2MB

    • MD5

      938b698b9ecd520b6aa677ea22041580

    • SHA1

      7d9da8481667f61462828a6c1b353226a42dec6e

    • SHA256

      14821f9b31583a9788901356951261d26beb4ed3f6512eab7496b415850e204b

    • SHA512

      460d2aaf608f116466e94e36a515300b00755ef0c9958d358767733018c170e8a3349b50624a1df007c680c0ae39b7c6684e51f0601e1331dff156ac7e7a0abe

    • SSDEEP

      24576:NTsK6OOZ1yS+nLtzPlrTkp6gaF17sQl33l18bh+Ind:CyS+nJblrTl17sQlsbhln

    Score
    10/10
    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v6

Tasks