Overview

overview

10

Static

static

10

6ed885b244...86.dll

windows7-x64

10

6ed885b244...86.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ed885b244b63b9536d07292ac484286

  • Size

    1.3MB

  • Sample

    231219-we5smsaga2

  • MD5

    6ed885b244b63b9536d07292ac484286

  • SHA1

    b6c4d6ed9206001fe5b533e018113363d613147e

  • SHA256

    ec6b7e12d076f5fc3117c3f22b73fd7f5040bbe3c92fb16e2cb249760bfb7b4b

  • SHA512

    9c53798a3548db0361e74732d3de6aaca4d1426a93eed1465221f21fceb7cf32fe32c540e80b91df0869a4438d8f3f9a8b3fa0f233aa0db82334449da770fd0b

  • SSDEEP

    24576:lcF2mkF3L+taOJE8/2JRi30MrJ4z0Tsnvd:G9JE8+3i54YT

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.242.31:443

192.119.110.73:443

192.210.222.88:443
Attributes
  • embedded_hash

    F4711E27D559B4AEB1A081A1EB0AC465

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      6ed885b244b63b9536d07292ac484286

    • Size

      1.3MB

    • MD5

      6ed885b244b63b9536d07292ac484286

    • SHA1

      b6c4d6ed9206001fe5b533e018113363d613147e

    • SHA256

      ec6b7e12d076f5fc3117c3f22b73fd7f5040bbe3c92fb16e2cb249760bfb7b4b

    • SHA512

      9c53798a3548db0361e74732d3de6aaca4d1426a93eed1465221f21fceb7cf32fe32c540e80b91df0869a4438d8f3f9a8b3fa0f233aa0db82334449da770fd0b

    • SSDEEP

      24576:lcF2mkF3L+taOJE8/2JRi30MrJ4z0Tsnvd:G9JE8+3i54YT

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks