Overview

overview

10

Static

static

10

77a2b5afed...63.dll

windows7-x64

10

77a2b5afed...63.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77a2b5afedb1640d28d896e7c4b4ca63

  • Size

    1.3MB

  • Sample

    240126-r4mwxahddr

  • MD5

    77a2b5afedb1640d28d896e7c4b4ca63

  • SHA1

    32d0ea5ad8ab3a2807c5436e97bfe74ffd3b4ac6

  • SHA256

    0191f21dc722a6d214ec760468f8f61bc586d7fe663214f37325c35f4405b782

  • SHA512

    a8af375bcc1fefa3f38cc6e64f624baa5c0151afa4d2b828833d9664ac8a7d62cd892207acd0baee19b7b0ac0abb7da6e51d4ef82f3e686b3b90da08ba75f6a7

  • SSDEEP

    24576:jcF2a0LmZKON/0PKGitIJyIWd1JWt0NVASN1RiZk66Tq83a:IAkRJWqck66Tv

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

23.229.29.48:443

5.9.224.204:443

192.210.222.81:443
Attributes
  • embedded_hash

    0E1A7A1479C37094441FA911262B322A

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      77a2b5afedb1640d28d896e7c4b4ca63

    • Size

      1.3MB

    • MD5

      77a2b5afedb1640d28d896e7c4b4ca63

    • SHA1

      32d0ea5ad8ab3a2807c5436e97bfe74ffd3b4ac6

    • SHA256

      0191f21dc722a6d214ec760468f8f61bc586d7fe663214f37325c35f4405b782

    • SHA512

      a8af375bcc1fefa3f38cc6e64f624baa5c0151afa4d2b828833d9664ac8a7d62cd892207acd0baee19b7b0ac0abb7da6e51d4ef82f3e686b3b90da08ba75f6a7

    • SSDEEP

      24576:jcF2a0LmZKON/0PKGitIJyIWd1JWt0NVASN1RiZk66Tq83a:IAkRJWqck66Tv

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks