Extracted

• • Target

    file.exe

  • Size

    3.9MB

  • MD5

    922e83e52f23027ae00d4ef9294d71dd

  • SHA1

    9668d375b80f244cfc1f340188e546485b40de29

  • SHA256

    a809b6ffd9241ec430d4ab5c866566365b642a9e553f811cbf5f3dc5acdd0ce5

  • SHA512

    8919e88a0c9510f1c75dad67ac5cd2d51b2b5d53b911a640e33eff4725a2a13457d09e25e5e0f66b74da2b3259c161b48b8a62ab3d4242096fce69e827e52a8a

  • SSDEEP

    98304:+YGMTbZifvqUHjvdmdUZNjXbdXuJvCqtiQ6ovaMO9f:bG2wvZVG2NdXyCqZBvQ

  Score

  10^/10

  danabotbankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot family

    danabot

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2