General

  • Target

    7b42ac343ba84d1e631ee8f09b9a76c6

  • Size

    1.3MB

  • MD5

    7b42ac343ba84d1e631ee8f09b9a76c6

  • SHA1

    78b5d212392aa2193c1b6adc8370e31d94860410

  • SHA256

    ec327c23bd9bff9f5e3e7488d70c37c9fa5f00cdfeb9ba2578d60d6869a75e16

  • SHA512

    846171511353f75b11d0bd9d8b8b439680110a99423e3024d7e3fa8429148ddb7ee628c3bab1679b514bbfe3c4f9491dc5a129c78483780ab5ad913aff233354

  • SSDEEP

    24576:5cFPylzYT/Hooe3EHncyGzb1z/EXv8LGP5luTTWWbZ66:6qoaVb1T0vMGhl4TnA

Score
10/10

Malware Config

Extracted

Family

danabot

Botnet

4

C2

23.229.29.48:443

152.89.247.31:443

192.210.222.81:443

Attributes
  • embedded_hash

    6AD9FE4F9E491E785665E0D144F61DAB

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Signatures

  • Danabot Loader Component 1 IoCs
  • Danabot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b42ac343ba84d1e631ee8f09b9a76c6
    .dll windows:5 windows x86 arch:x86

    5f64f70cee34af5497ae02dd3fd387b7


    Headers

    Imports

    Exports

    Sections