Overview

overview

10

Static

static

10

7b42ac343b...c6.dll

windows7-x64

10

7b42ac343b...c6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b42ac343ba84d1e631ee8f09b9a76c6

  • Size

    1.3MB

  • Sample

    240127-zrt4fsdgdr

  • MD5

    7b42ac343ba84d1e631ee8f09b9a76c6

  • SHA1

    78b5d212392aa2193c1b6adc8370e31d94860410

  • SHA256

    ec327c23bd9bff9f5e3e7488d70c37c9fa5f00cdfeb9ba2578d60d6869a75e16

  • SHA512

    846171511353f75b11d0bd9d8b8b439680110a99423e3024d7e3fa8429148ddb7ee628c3bab1679b514bbfe3c4f9491dc5a129c78483780ab5ad913aff233354

  • SSDEEP

    24576:5cFPylzYT/Hooe3EHncyGzb1z/EXv8LGP5luTTWWbZ66:6qoaVb1T0vMGhl4TnA

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

23.229.29.48:443

152.89.247.31:443

192.210.222.81:443
Attributes
  • embedded_hash

    6AD9FE4F9E491E785665E0D144F61DAB

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      7b42ac343ba84d1e631ee8f09b9a76c6

    • Size

      1.3MB

    • MD5

      7b42ac343ba84d1e631ee8f09b9a76c6

    • SHA1

      78b5d212392aa2193c1b6adc8370e31d94860410

    • SHA256

      ec327c23bd9bff9f5e3e7488d70c37c9fa5f00cdfeb9ba2578d60d6869a75e16

    • SHA512

      846171511353f75b11d0bd9d8b8b439680110a99423e3024d7e3fa8429148ddb7ee628c3bab1679b514bbfe3c4f9491dc5a129c78483780ab5ad913aff233354

    • SSDEEP

      24576:5cFPylzYT/Hooe3EHncyGzb1z/EXv8LGP5luTTWWbZ66:6qoaVb1T0vMGhl4TnA

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks