General
-
Target
3fdd05674f8ea7f32ea9c5cda1364ea6ce32223343a63eec2b1f08799aab0881
-
Size
6.0MB
-
Sample
230129-wgd3pshe3w
-
MD5
67e9ce6258294f6c6b6c1894cceceba3
-
SHA1
fbd17c535207116b4b609b296b7daca0c1ab3efc
-
SHA256
3fdd05674f8ea7f32ea9c5cda1364ea6ce32223343a63eec2b1f08799aab0881
-
SHA512
665d43b8ddf76737805b5ac1609681d222eb054f88ff5fc84d7d239c353396cca2c8867d446cb6fd5a7d8f4a7194bf9d38d18032edb7110d664894f865c1fce6
-
SSDEEP
98304:Tde/cO1gtKwR9shwVsAOLIIsMxp3onwGb+O+D4mPRPe/Srd9/svgINcLzIR:T0/FY9mWsX79qwGb+drxcSjIgImLcR
Static task
static1
Behavioral task
behavioral1
Sample
3fdd05674f8ea7f32ea9c5cda1364ea6ce32223343a63eec2b1f08799aab0881.exe
Resource
win7-20220901-en
Malware Config
Extracted
danabot
1765
3
142.44.224.16:443
192.236.162.42:443
192.236.146.203:443
192.161.48.5:443
-
embedded_hash
B2585F6479280F48B64C99F950BBF36D
-
type
main
Targets
-
-
Target
3fdd05674f8ea7f32ea9c5cda1364ea6ce32223343a63eec2b1f08799aab0881
-
Size
6.0MB
-
MD5
67e9ce6258294f6c6b6c1894cceceba3
-
SHA1
fbd17c535207116b4b609b296b7daca0c1ab3efc
-
SHA256
3fdd05674f8ea7f32ea9c5cda1364ea6ce32223343a63eec2b1f08799aab0881
-
SHA512
665d43b8ddf76737805b5ac1609681d222eb054f88ff5fc84d7d239c353396cca2c8867d446cb6fd5a7d8f4a7194bf9d38d18032edb7110d664894f865c1fce6
-
SSDEEP
98304:Tde/cO1gtKwR9shwVsAOLIIsMxp3onwGb+O+D4mPRPe/Srd9/svgINcLzIR:T0/FY9mWsX79qwGb+drxcSjIgImLcR
-
Blocklisted process makes network request
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-