General

  • Target

    2856-11-0x0000000004050000-0x0000000004EE1000-memory.dmp

  • Size

    14.6MB

  • MD5

    9e553fdbe7dcf2e2d4d30ed9dde4d978

  • SHA1

    3952c958a858ae112645014927e5041c12402ff6

  • SHA256

    538bcbc109386aca5ec1f78334405efea89fed88415e8f72d1efaf441c2dda46

  • SHA512

    0e9d9be2a8b267389a6c55e06e78c36793e1f16115cd9f629fbe0cc09497fcf67cec85cce2c55cb367dc69eb1af56e4474038558265e4d64e58d0e1073e6ca90

  • SSDEEP

    196608:GLUipF5Xcu4GSOYJ4L7/Vrq1Garc9JKxoTeaXf6:GLZFCuzSfJ67MGarc9JKxb

Score
10/10

Malware Config

Extracted

Family

danabot

Attributes
  • type

    loader

Signatures

  • Danabot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2856-11-0x0000000004050000-0x0000000004EE1000-memory.dmp
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections