danabot | 31f98e5ba70bc4c2d3c0fa523f07720f58644dde2f16e26c299be310fc5700df | Triage

Sharing

General

Target

31f98e5ba70bc4c2d3c0fa523f07720f58644dde2f16e26c299be310fc5700df
Size

1.3MB
Sample

221027-mjzmrabhcm
MD5

429ab5fe9bd1db4d4ad8361875c24770
SHA1

94620b8a6dbdffb788f261c6e29aa7180e9ca904
SHA256

31f98e5ba70bc4c2d3c0fa523f07720f58644dde2f16e26c299be310fc5700df
SHA512

36016d3dedad4c8cd16628af4d1ddd593dfc40027d07780d96578c328d2cfaf324db5bfe5bd05eff78b6b82011713a4ae8070432f130e3f79fdb2c6f912a6cac
SSDEEP

24576:OtEBrp74Mugu55AwRenALePZR3dEUWMy3zAI1dyuIT2UO6j9ko5JNPDCAFZr:OmuntRen4ePZRdqMyUYdlIiUpu4JVFr

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

C2

172.86.120.215:443

213.227.155.103:443

103.187.26.147:443

172.86.120.138:443

Attributes

embedded_hash
BBBB0DB8CB7E6D152424535822E445A7
type
loader

Targets

- Target
  
  31f98e5ba70bc4c2d3c0fa523f07720f58644dde2f16e26c299be310fc5700df
- Size
  
  1.3MB
- MD5
  
  429ab5fe9bd1db4d4ad8361875c24770
- SHA1
  
  94620b8a6dbdffb788f261c6e29aa7180e9ca904
- SHA256
  
  31f98e5ba70bc4c2d3c0fa523f07720f58644dde2f16e26c299be310fc5700df
- SHA512
  
  36016d3dedad4c8cd16628af4d1ddd593dfc40027d07780d96578c328d2cfaf324db5bfe5bd05eff78b6b82011713a4ae8070432f130e3f79fdb2c6f912a6cac
- SSDEEP
  
  24576:OtEBrp74Mugu55AwRenALePZR3dEUWMy3zAI1dyuIT2UO6j9ko5JNPDCAFZr:OmuntRen4ePZRdqMyUYdlIiUpu4JVFr
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan