Overview

overview

10

Static

static

10

251F0367A0...0B.dll

windows7-x64

10

251F0367A0...0B.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    251F0367A0AF27D06454748F0570227B5ECD705F0FF0B.dll

  • Size

    1.3MB

  • Sample

    221029-q2y1qahee5

  • MD5

    68d02c1a01d60c7cdbdf9125bdd0f0cf

  • SHA1

    7520a2d9d572ea41e83115eba2495936f21cb4e5

  • SHA256

    251f0367a0af27d06454748f0570227b5ecd705f0ff0b40cfa6a75517d099423

  • SHA512

    78263097188299d1961a8658398f6edd0b0a69f6cdc862a2b0868d4505f28cec090aa499eaeb6ebdc2126b151cd6a06396238fb0e8d0723d4ba2a5b7178152aa

  • SSDEEP

    24576:R8FPipdRl4oQ5Z8tkd8WVApcZPyJuPh+OGTSN1m:S+6mqtygNGTUI

Score
10/10
danabot21bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

21

C2

185.243.114.28:443

Attributes
  • embedded_hash

    62ADE58147D8668672CDF0EE0BAD2ADC

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      251F0367A0AF27D06454748F0570227B5ECD705F0FF0B.dll

    • Size

      1.3MB

    • MD5

      68d02c1a01d60c7cdbdf9125bdd0f0cf

    • SHA1

      7520a2d9d572ea41e83115eba2495936f21cb4e5

    • SHA256

      251f0367a0af27d06454748f0570227b5ecd705f0ff0b40cfa6a75517d099423

    • SHA512

      78263097188299d1961a8658398f6edd0b0a69f6cdc862a2b0868d4505f28cec090aa499eaeb6ebdc2126b151cd6a06396238fb0e8d0723d4ba2a5b7178152aa

    • SSDEEP

      24576:R8FPipdRl4oQ5Z8tkd8WVApcZPyJuPh+OGTSN1m:S+6mqtygNGTUI

    Score
    10/10
    danabot21bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks