Overview

overview

10

Static

static

10

808d3ad409...a4.dll

windows7-x64

10

808d3ad409...a4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    808d3ad409144db9e8a6e645713690a4

  • Size

    1.3MB

  • Sample

    240129-w2m64shefl

  • MD5

    808d3ad409144db9e8a6e645713690a4

  • SHA1

    3632c2550c1163703cd179cc9ccdc6aa4dd73bce

  • SHA256

    c9d0491f301ac2effbf939ab104c0d73942d86b03db34b96a1a85847e37b71e5

  • SHA512

    2dda74f88d3065c9b7cf09e06d2be92d32042ad5e1abb001e54c72ddb7949530aaaaa24c45490517c121305c7f572c306dd3f0b9c0d2b2f888eba71931747e30

  • SSDEEP

    24576:rcFPyvwAb4zIcZEKZjQIl8J4APf0nRpkgw1ztA28Tij/9bCOma:wybFXKyfARpkLpAFTa9lm

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.124:443

142.11.206.50:443
Attributes
  • embedded_hash

    6AD9FE4F9E491E785665E0D144F61DAB

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      808d3ad409144db9e8a6e645713690a4

    • Size

      1.3MB

    • MD5

      808d3ad409144db9e8a6e645713690a4

    • SHA1

      3632c2550c1163703cd179cc9ccdc6aa4dd73bce

    • SHA256

      c9d0491f301ac2effbf939ab104c0d73942d86b03db34b96a1a85847e37b71e5

    • SHA512

      2dda74f88d3065c9b7cf09e06d2be92d32042ad5e1abb001e54c72ddb7949530aaaaa24c45490517c121305c7f572c306dd3f0b9c0d2b2f888eba71931747e30

    • SSDEEP

      24576:rcFPyvwAb4zIcZEKZjQIl8J4APf0nRpkgw1ztA28Tij/9bCOma:wybFXKyfARpkLpAFTa9lm

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks