Extracted

• • Target

    644fad21b0be125864ce6f04c368b78ca08dcc763d741afa2e6b7e153cc03f40

  • Size

    4.6MB

  • MD5

    efd8da8f11fd4f40ae0acf7ba2b653c1

  • SHA1

    c4b29bacaf8aa72fd355d9dbf9130020ee28432f

  • SHA256

    644fad21b0be125864ce6f04c368b78ca08dcc763d741afa2e6b7e153cc03f40

  • SHA512

    82b95a6e1e2e87901bb11b9577f03ca56136ceccbb9456934aab0045f78da28bcacf40d9fed7dcfbd4cadd5f08ba44df539bd20d52ee0b8134080858860b4cd8

  • SSDEEP

    98304:9GxsYgocEEhWTI0OoihUMZrJzRZ1xU61Hn1eMPN8VyCtE2Kf:QxyocEEjoie6llxU61H1eM5OE2Kf

  Score

  10^/10

  danabotbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1