General

  • Target

    9e2e09592af42e6493216ccfa7b4c8d9e6a09249082edfdbdcd293cb5a8f1e9a

  • Size

    1.2MB

  • Sample

    221012-f9hzcscfak

  • MD5

    20414be8ceb675059f5fb9d2f656e7b9

  • SHA1

    5dbd2930909ef93772b592a6fc3452ce173b1a63

  • SHA256

    9e2e09592af42e6493216ccfa7b4c8d9e6a09249082edfdbdcd293cb5a8f1e9a

  • SHA512

    15f78877242404125e50bcfc9989d1b906daea2a4f9feb4b067900fefe62e91eb74492938d06c123e37fa8ff46789216d2d6797c9ba4aa72161aee331c85b2d5

  • SSDEEP

    24576:dXvVcG5KIkfbO8FuS/uWFYHLss1kLIM6VPdzMcGEcdoV8Kv:dXvVJPibx/rFYHwswInVPdIRRdhKv

Score
10/10

Malware Config

Extracted

Family

danabot

C2

192.236.233.188:443

192.119.70.159:443

23.106.124.171:443

Attributes
  • embedded_hash

    F11D3871631E16E8DE15C24B32328D98

  • type

    loader

Targets

    • Target

      9e2e09592af42e6493216ccfa7b4c8d9e6a09249082edfdbdcd293cb5a8f1e9a

    • Size

      1.2MB

    • MD5

      20414be8ceb675059f5fb9d2f656e7b9

    • SHA1

      5dbd2930909ef93772b592a6fc3452ce173b1a63

    • SHA256

      9e2e09592af42e6493216ccfa7b4c8d9e6a09249082edfdbdcd293cb5a8f1e9a

    • SHA512

      15f78877242404125e50bcfc9989d1b906daea2a4f9feb4b067900fefe62e91eb74492938d06c123e37fa8ff46789216d2d6797c9ba4aa72161aee331c85b2d5

    • SSDEEP

      24576:dXvVcG5KIkfbO8FuS/uWFYHLss1kLIM6VPdzMcGEcdoV8Kv:dXvVJPibx/rFYHwswInVPdIRRdhKv

    Score
    10/10
    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks