General

  • Target

    System.Settings.exe

  • Size

    513.3MB

  • MD5

    09bf2b43f546db62365e232a91ce972d

  • SHA1

    5a85e7a702830e25b019deb18334efb57aae925d

  • SHA256

    58a2e59eb1c8d7d83fc6bf6e15fbe3919794d005014a2208bf5842a05146f2e3

  • SHA512

    be92e830dd83ea664c3ce7a5d39531e1d7c33a7a5bc96c807659b8ce6d43922620df4d499a408a57ed36989c01edcde9e725f1e5d5d91e4e752e4993fbea5dc7

  • SSDEEP

    6291456:VRu3+R48+FkPWAOfraP6dsm/s12VOA6z/s8WAOfraPnWAOfraPXWAOfraP+WAOfe:VQ8+FdTy2VOA6z/JCx2vryR

Score
10/10

Malware Config

Extracted

Family

danabot

C2

101.0.97.0:109

109.0.0.27:114

103.0.114.0:116

97.0.109.0:101

Attributes
  • type

    loader

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Danabot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • System.Settings.exe
    .exe windows:6 windows x86

    34dc34e244a6f4378a06076ff16fc082


    Headers

    Imports

    Exports

    Sections