danabot | 9b17758d4deab85446eaafc5ebfda9734e20f391d993a90756c15f6fc3016e60 | Triage

Sharing

General

Target

40e50d02aef564d2e3d9206b32c1e4fd
Size

1.3MB
Sample

231219-rmw39adfaj
MD5

40e50d02aef564d2e3d9206b32c1e4fd
SHA1

37d1df49f4dbd81aed9648c64c76dde8f3e52400
SHA256

9b17758d4deab85446eaafc5ebfda9734e20f391d993a90756c15f6fc3016e60
SHA512

ba16b4518d7a6690352006bbb80d5af49a595ddfb6428108f9c5b68b9cc26bedd273df9f728ecff515e6eb0a9f31e4e5509b24d910008be11b9f22c1cbba7786
SSDEEP

24576:lcF2L9dT0secg4cOeMDBj2Zsrm0Ty0z1PTzK:GyjFjMTexTu

Score

10^/10

danabot 4

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.242.31:443

192.119.110.73:443

192.210.222.88:443

Attributes

embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
type
loader

rsa_pubkey.plain

rsa_privkey.plain

Targets

- Target
  
  40e50d02aef564d2e3d9206b32c1e4fd
- Size
  
  1.3MB
- MD5
  
  40e50d02aef564d2e3d9206b32c1e4fd
- SHA1
  
  37d1df49f4dbd81aed9648c64c76dde8f3e52400
- SHA256
  
  9b17758d4deab85446eaafc5ebfda9734e20f391d993a90756c15f6fc3016e60
- SHA512
  
  ba16b4518d7a6690352006bbb80d5af49a595ddfb6428108f9c5b68b9cc26bedd273df9f728ecff515e6eb0a9f31e4e5509b24d910008be11b9f22c1cbba7786
- SSDEEP
  
  24576:lcF2L9dT0secg4cOeMDBj2Zsrm0Ty0z1PTzK:GyjFjMTexTu
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2