danabot | e6f057458825fc5d93021d6511fa259b1904865dd34b8d0659aa78c91e8e6cde | Triage

Sharing

General

Target

e6f057458825fc5d93021d6511fa259b1904865dd34b8d0659aa78c91e8e6cde
Size

2.6MB
Sample

221209-f7j4msfd5v
MD5

6e7c0bb4667432c3f8f96c0138d533cd
SHA1

496490e05e95be9f2aae5fd2db64166532cf9559
SHA256

e6f057458825fc5d93021d6511fa259b1904865dd34b8d0659aa78c91e8e6cde
SHA512

4ba38ad9847e3c35c5fda0f749063f6b07640e6f9f98679226e071f5bf00d29f5594262e31c136e385e7a288f504b9bb2c7d47a5e8191404009a5f8d93992f59
SSDEEP

49152:0zQ+UQp49Guy1nE+naujsw/mWapaL72pf8H9oz6nt4XhigtxzbxOu:0zEQeGlZaujznaoifk+enChXtxzbxO

Score

10^/10

danabot banker trojan

Malware Config

Extracted

Family

danabot

Attributes

embedded_hash
341D2FD1638BB267A80C7445E1909B57
type
loader

Targets

- Target
  
  e6f057458825fc5d93021d6511fa259b1904865dd34b8d0659aa78c91e8e6cde
- Size
  
  2.6MB
- MD5
  
  6e7c0bb4667432c3f8f96c0138d533cd
- SHA1
  
  496490e05e95be9f2aae5fd2db64166532cf9559
- SHA256
  
  e6f057458825fc5d93021d6511fa259b1904865dd34b8d0659aa78c91e8e6cde
- SHA512
  
  4ba38ad9847e3c35c5fda0f749063f6b07640e6f9f98679226e071f5bf00d29f5594262e31c136e385e7a288f504b9bb2c7d47a5e8191404009a5f8d93992f59
- SSDEEP
  
  49152:0zQ+UQp49Guy1nE+naujsw/mWapaL72pf8H9oz6nt4XhigtxzbxOu:0zEQeGlZaujznaoifk+enChXtxzbxO
Score

10^/10

danabot banker trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
- Loads dropped DLL
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

danabotbankertrojan