Overview

overview

10

Static

static

CA94B3C5AA...7B.exe

windows7-x64

10

CA94B3C5AA...7B.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CA94B3C5AAD3083333D2A146E9F3F77B.exe

  • Size

    2.2MB

  • Sample

    221130-sypnzscd88

  • MD5

    ca94b3c5aad3083333d2a146e9f3f77b

  • SHA1

    8f68f5ab7f2326764391552a2f0c71c347b24c30

  • SHA256

    9f4287cdb91e820fac11434ec96ebfa1d19780863aff52c3db71726d21e841f1

  • SHA512

    fd70b9a7f49ac993953285d44eba0a65fac5ba914de1393f20ba2748a0a93258a6c6c8dac051b3e4676745bcd38e6e7f398b01936ca76d665ccaf26cbef765ba

  • SSDEEP

    49152:Xn5YOIqY8v6jDzSfIGG40COiuzFibk2MElu05GdwSSt:Xs8v8fSzOgb3vmwZt

Score
10/10
danabot53bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

53

C2

176.126.113.94:443

85.208.184.5:443
Attributes
  • embedded_hash

    0904D576D3E3892F5B164DEE5EF8790B

  • type

    loader

Targets

    • Target

      CA94B3C5AAD3083333D2A146E9F3F77B.exe

    • Size

      2.2MB

    • MD5

      ca94b3c5aad3083333d2a146e9f3f77b

    • SHA1

      8f68f5ab7f2326764391552a2f0c71c347b24c30

    • SHA256

      9f4287cdb91e820fac11434ec96ebfa1d19780863aff52c3db71726d21e841f1

    • SHA512

      fd70b9a7f49ac993953285d44eba0a65fac5ba914de1393f20ba2748a0a93258a6c6c8dac051b3e4676745bcd38e6e7f398b01936ca76d665ccaf26cbef765ba

    • SSDEEP

      49152:Xn5YOIqY8v6jDzSfIGG40COiuzFibk2MElu05GdwSSt:Xs8v8fSzOgb3vmwZt

    Score
    10/10
    danabot53bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks