Overview

overview

10

Static

static

10

7e9fd886fb...cd.dll

windows7-x64

10

7e9fd886fb...cd.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e9fd886fb75a53739ad571d7503b4cd

  • Size

    1.3MB

  • Sample

    231222-kqm67adghp

  • MD5

    7e9fd886fb75a53739ad571d7503b4cd

  • SHA1

    ea11b6b19230438b87d45b0d4fe13071d94bb235

  • SHA256

    8cb9b23ddb2b409472b3ba4c4e17a63d3cb09205a2ca8e82f32a6fcc3bd343cb

  • SHA512

    ad715a5b6e44c0d84a5d92b40fb533666f4cba349f415372e567dff50e901c8186f42b2b0dc723fba2e8884e49a97e1611c9551af8f2d0cb8f0cfaba7add73f9

  • SSDEEP

    24576:8cF2OwKiUPzP/iczKo1nkZvGnu1GUPWTZqsGo:/HNOZeuDWTvV

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

23.229.29.48:443

5.9.224.204:443

192.210.222.81:443
Attributes
  • embedded_hash

    0E1A7A1479C37094441FA911262B322A

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      7e9fd886fb75a53739ad571d7503b4cd

    • Size

      1.3MB

    • MD5

      7e9fd886fb75a53739ad571d7503b4cd

    • SHA1

      ea11b6b19230438b87d45b0d4fe13071d94bb235

    • SHA256

      8cb9b23ddb2b409472b3ba4c4e17a63d3cb09205a2ca8e82f32a6fcc3bd343cb

    • SHA512

      ad715a5b6e44c0d84a5d92b40fb533666f4cba349f415372e567dff50e901c8186f42b2b0dc723fba2e8884e49a97e1611c9551af8f2d0cb8f0cfaba7add73f9

    • SSDEEP

      24576:8cF2OwKiUPzP/iczKo1nkZvGnu1GUPWTZqsGo:/HNOZeuDWTvV

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks