General

  • Target

    5cf8d15847cbc4f3be8686db95dc918fc01e53ce9e74cd7cc7e189d474d4e989

  • Size

    265KB

  • Sample

    221004-t94gysbef7

  • MD5

    7a0c77ee41e10851af68272f00b6dbff

  • SHA1

    2883acf384b50634149072b3d1aff8333ffa456d

  • SHA256

    5cf8d15847cbc4f3be8686db95dc918fc01e53ce9e74cd7cc7e189d474d4e989

  • SHA512

    cbe16bdafbef3a2d07438116778ba31d316166e1309e6f56763aefe5739c2a01de08c6f2b7d4206ec6d731a1439d3fb1f5fba935feb008c97a6dc69d8f95a646

  • SSDEEP

    6144:ZtF93LLd1WlnWbPrfXJuCuzbgwuO1+wVf:Z5vdUJqrXBunnx

Score
10/10

Malware Config

Extracted

Family

danabot

Attributes
  • embedded_hash

    EAD30BF58E340E9E105B328F524565E0

  • type

    loader

Targets

    • Target

      5cf8d15847cbc4f3be8686db95dc918fc01e53ce9e74cd7cc7e189d474d4e989

    • Size

      265KB

    • MD5

      7a0c77ee41e10851af68272f00b6dbff

    • SHA1

      2883acf384b50634149072b3d1aff8333ffa456d

    • SHA256

      5cf8d15847cbc4f3be8686db95dc918fc01e53ce9e74cd7cc7e189d474d4e989

    • SHA512

      cbe16bdafbef3a2d07438116778ba31d316166e1309e6f56763aefe5739c2a01de08c6f2b7d4206ec6d731a1439d3fb1f5fba935feb008c97a6dc69d8f95a646

    • SSDEEP

      6144:ZtF93LLd1WlnWbPrfXJuCuzbgwuO1+wVf:Z5vdUJqrXBunnx

    Score
    10/10
    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks