danabot | 5ef9be168751664f84385f33b62bef6a3617bb4aa5b482fefd5a4e2e16b76fc0 | Triage

Sharing

General

Target

5ef9be168751664f84385f33b62bef6a3617bb4aa5b482fefd5a4e2e16b76fc0
Size

2.5MB
Sample

221209-bte6baca54
MD5

ef4a25145ba4b158bcc06f4061a46250
SHA1

3fccbda67b5d2040265b732ad3a66ba0b6a16115
SHA256

5ef9be168751664f84385f33b62bef6a3617bb4aa5b482fefd5a4e2e16b76fc0
SHA512

f6bd47d4bc8feca4deba24a91664a0da7acca4f052d92679eeda9a9dd4f4756d103ef3db4e1f61a9f5a4437df22e4acd02d5acce19dc8929ff4e9c372554a3dd
SSDEEP

49152:mCAJ4YBXvqBXSrCLjtzfLMr9hjlZmF0LkYFCRA9E/MT9VvUbDlc/Dua:PAJ4YCVS4zDMJhuF0LkoGE38PCLua

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

Attributes

embedded_hash
341D2FD1638BB267A80C7445E1909B57
type
loader

Targets

- Target
  
  5ef9be168751664f84385f33b62bef6a3617bb4aa5b482fefd5a4e2e16b76fc0
- Size
  
  2.5MB
- MD5
  
  ef4a25145ba4b158bcc06f4061a46250
- SHA1
  
  3fccbda67b5d2040265b732ad3a66ba0b6a16115
- SHA256
  
  5ef9be168751664f84385f33b62bef6a3617bb4aa5b482fefd5a4e2e16b76fc0
- SHA512
  
  f6bd47d4bc8feca4deba24a91664a0da7acca4f052d92679eeda9a9dd4f4756d103ef3db4e1f61a9f5a4437df22e4acd02d5acce19dc8929ff4e9c372554a3dd
- SSDEEP
  
  49152:mCAJ4YBXvqBXSrCLjtzfLMr9hjlZmF0LkYFCRA9E/MT9VvUbDlc/Dua:PAJ4YCVS4zDMJhuF0LkoGE38PCLua
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
- Loads dropped DLL
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan