Overview

overview

10

Static

static

10

0x00020000...17.dll

windows7-x64

10

0x00020000...17.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x000200000001ab48-117.dat

  • Size

    1.3MB

  • Sample

    230604-bqfmnsbb6y

  • MD5

    f725195252fe8f50713af79462d4b0cc

  • SHA1

    d360d6a51dbc338a8830d0b152ae563607c1e81e

  • SHA256

    7672c349879e1579b840d0e3cb67034e594e73f811e1113dfc4dd84e810c7759

  • SHA512

    6a5fb23be49e93e087a5dc37c25def7688d97850936ff7420f00f98385c47500c18d0e2946d93c25384d4d2b6a8bced503c595b0bc9d02bb6b11a99a9d23ab7a

  • SSDEEP

    24576:e8pWEmpV0KhE9tAMM7+VS4b7wNeY2gAuUP1jluT3:1DG4bqCu4QT

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

23.254.144.209:443

23.254.227.74:443

192.255.166.212:443
Attributes
  • embedded_hash

    0E1A7A1479C37094441FA911262B322A

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      0x000200000001ab48-117.dat

    • Size

      1.3MB

    • MD5

      f725195252fe8f50713af79462d4b0cc

    • SHA1

      d360d6a51dbc338a8830d0b152ae563607c1e81e

    • SHA256

      7672c349879e1579b840d0e3cb67034e594e73f811e1113dfc4dd84e810c7759

    • SHA512

      6a5fb23be49e93e087a5dc37c25def7688d97850936ff7420f00f98385c47500c18d0e2946d93c25384d4d2b6a8bced503c595b0bc9d02bb6b11a99a9d23ab7a

    • SSDEEP

      24576:e8pWEmpV0KhE9tAMM7+VS4b7wNeY2gAuUP1jluT3:1DG4bqCu4QT

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks