General
-
Target
bc44a6bf30e3c50959639be5ba20c7019b15ece46da8b1c9b041901adef3c3c8
-
Size
1.3MB
-
Sample
221027-lgmpqsbgdj
-
MD5
044d24bfe683577607808993d382adbf
-
SHA1
88e4bea2b2fa7811040b756e2962c264d4f07c29
-
SHA256
bc44a6bf30e3c50959639be5ba20c7019b15ece46da8b1c9b041901adef3c3c8
-
SHA512
4349acbb6f2812f47b56ae21a8bb6421ec9ae85bd068cee4f10c7bd4bf17591a3038acad4b229579fde828d06cd9aa39fe09ee88af5e1b22d750b33a9a852fa5
-
SSDEEP
24576:FPA7b+PlZvRJW7+mpuG2BlACM+cbnSsILijUD7xB9TKvkD1ScVVGQ1euf/sdXyVe:FoH+PlTJlmvTMOgVG+17etXyJm
Static task
static1
Malware Config
Extracted
danabot
172.86.120.215:443
213.227.155.103:443
103.187.26.147:443
172.86.120.138:443
49.0.50.0:57
51.0.52.0:0
53.0.54.0:1200
55.0.56.0:65535
-
embedded_hash
BBBB0DB8CB7E6D152424535822E445A7
-
type
loader
Targets
-
-
Target
bc44a6bf30e3c50959639be5ba20c7019b15ece46da8b1c9b041901adef3c3c8
-
Size
1.3MB
-
MD5
044d24bfe683577607808993d382adbf
-
SHA1
88e4bea2b2fa7811040b756e2962c264d4f07c29
-
SHA256
bc44a6bf30e3c50959639be5ba20c7019b15ece46da8b1c9b041901adef3c3c8
-
SHA512
4349acbb6f2812f47b56ae21a8bb6421ec9ae85bd068cee4f10c7bd4bf17591a3038acad4b229579fde828d06cd9aa39fe09ee88af5e1b22d750b33a9a852fa5
-
SSDEEP
24576:FPA7b+PlZvRJW7+mpuG2BlACM+cbnSsILijUD7xB9TKvkD1ScVVGQ1euf/sdXyVe:FoH+PlTJlmvTMOgVG+17etXyJm
-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-