Overview

overview

10

Static

static

10

0x000a0000...61.dll

windows7-x64

10

0x000a0000...61.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x000a0000000134f2-61.dat

  • Size

    723KB

  • Sample

    221207-c8k6jsbe7w

  • MD5

    d3448a7b5e2fe0c7173716b07ee76eb8

  • SHA1

    f106248c3b292bb9946cb352cd91e264bf0b18d2

  • SHA256

    e0e746ff4d24bd4588a7c1a1b16b0393ff828fb37818aa475709e2d6c9bf801e

  • SHA512

    dc03d0eb9af44541ae9286d41275c19fb55aee3bd026d915b9d0861714f3ccb412f7c8e9b103babeff755a5db5646319694b6a5f144f4b90478cb88e519e96f6

  • SSDEEP

    6144:Am+xNrXuGsV0xoSRHpSb+GpWTyzFNhK8WbyIv8o010JNeU3tKt2I+JThzGnVTvSf:AQDqVap2Fe5tazGJKlQP1wWa

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

5.61.58.130

2.56.213.39

5.61.56.192
rsa_pubkey.plain

Targets

    • Target

      0x000a0000000134f2-61.dat

    • Size

      723KB

    • MD5

      d3448a7b5e2fe0c7173716b07ee76eb8

    • SHA1

      f106248c3b292bb9946cb352cd91e264bf0b18d2

    • SHA256

      e0e746ff4d24bd4588a7c1a1b16b0393ff828fb37818aa475709e2d6c9bf801e

    • SHA512

      dc03d0eb9af44541ae9286d41275c19fb55aee3bd026d915b9d0861714f3ccb412f7c8e9b103babeff755a5db5646319694b6a5f144f4b90478cb88e519e96f6

    • SSDEEP

      6144:Am+xNrXuGsV0xoSRHpSb+GpWTyzFNhK8WbyIv8o010JNeU3tKt2I+JThzGnVTvSf:AQDqVap2Fe5tazGJKlQP1wWa

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks