General
-
Target
86b85af1db1464e1db70694e7e968375
-
Size
1.1MB
-
Sample
240201-m2t5zsddhq
-
MD5
86b85af1db1464e1db70694e7e968375
-
SHA1
3250e49a26d7296006e2ecd719c1f14541797ed2
-
SHA256
cf2072e20adf6725face6676b96eafe462a6e6caba7872eddaf781d205bd0f07
-
SHA512
d3024c2e2c3fa8c91ee521510185ede40a8246eba3e1418a68346adf7c4b72f8fc4308ceaed871ac5535e0cc1fd0a7a35dacb23b821028b65f2e15e173e8f687
-
SSDEEP
24576:rnaYDQsM4t7Iq8WtApeuHn7r+VsFI+YXmMdtarZ1N4:5161JE8n7rbFI+YBYrZ1N4
Static task
static1
Behavioral task
behavioral1
Sample
86b85af1db1464e1db70694e7e968375.exe
Resource
win7-20231215-en
Malware Config
Extracted
danabot
4
104.168.148.6:443
5.9.224.204:443
192.210.222.81:443
23.229.29.48:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
86b85af1db1464e1db70694e7e968375
-
Size
1.1MB
-
MD5
86b85af1db1464e1db70694e7e968375
-
SHA1
3250e49a26d7296006e2ecd719c1f14541797ed2
-
SHA256
cf2072e20adf6725face6676b96eafe462a6e6caba7872eddaf781d205bd0f07
-
SHA512
d3024c2e2c3fa8c91ee521510185ede40a8246eba3e1418a68346adf7c4b72f8fc4308ceaed871ac5535e0cc1fd0a7a35dacb23b821028b65f2e15e173e8f687
-
SSDEEP
24576:rnaYDQsM4t7Iq8WtApeuHn7r+VsFI+YXmMdtarZ1N4:5161JE8n7rbFI+YBYrZ1N4
-
Blocklisted process makes network request
-
Loads dropped DLL
-