Overview

overview

10

Static

static

malware_sm...76.exe

windows7-x64

10

malware_sm...76.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    malware_smoke_2685359676
  • Size 1.0MB
  • Sample221004-rf7w6sbbd6
  • SHA256 2115604b92baedae0ce00d0999b30ce95ef4b7a500394d93ff0964058564b86f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
danabot5bankertrojan

Malware Config

Extracted

Family

  • danabot

Botnet

  • 5

C2

  • 23.254.133.7:443

  • 213.227.155.102:443

Attributes
  • embedded_hash

    12DF5314C5FDA13D9BF397EE140FD5E8

  • type

    loader

Targets

    • Target
      malware_smoke_2685359676
    • Size 1.0MB
    • SHA256 2115604b92baedae0ce00d0999b30ce95ef4b7a500394d93ff0964058564b86f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    danabot5bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks