Extracted

• • Target

    78284c9f117c387050311cd0a08d695ca8b1136b0db2f45397a04f1ac5a9a250

  • Size

    214KB

  • MD5

    906d61684a9994d7e338ffbde12a77cc

  • SHA1

    d4e08cd8096504aca9a01dfae631de580b3da365

  • SHA256

    78284c9f117c387050311cd0a08d695ca8b1136b0db2f45397a04f1ac5a9a250

  • SHA512

    2952dee399886f2b82463eb69eba02b30c29dab0efd1883b826cd2804497fd30b2536cea3cf8d2acb42065be6f3a47dcc567f38917bfdf9b754988f2bf4f9a06

  • SSDEEP

    6144:UkJLPvkxjs9QVO/+ywvE+JHq8TjlVklPH:UkJjcNsuVO/CECflU

  Score

  10^/10

  danabotsmokeloaderbackdoorbankertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Detects Smokeloader packer

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  behavioral1