Overview

overview

10

Static

static

3

9d3c2ff258...48.exe

windows7-x64

10

9d3c2ff258...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d3c2ff258c5d4c06cc51d063c007248

  • Size

    1.0MB

  • Sample

    240215-hjvatabb61

  • MD5

    9d3c2ff258c5d4c06cc51d063c007248

  • SHA1

    02c3af2affe3f5b8cfcc0721e12a71df12c6c6ba

  • SHA256

    f43c76a153e03551456a21ebd15a07017fbabd51a1080752ddb5241f9d599782

  • SHA512

    bbaad7a55d563b742530527cab1384edb4fdf868e6d3524fafd282ce21446c622df9ebca2d096f843ad8489a5a474005fb41977a03978772d7394ce052034cde

  • SSDEEP

    24576:i5o3PDoj9ii8hW5YdFswKy+/3IJ7irH9C1Fs:i5APhRh4FwKycro

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

23.229.29.48:443

5.9.224.204:443

192.210.222.81:443
Attributes
  • embedded_hash

    0E1A7A1479C37094441FA911262B322A

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      9d3c2ff258c5d4c06cc51d063c007248

    • Size

      1.0MB

    • MD5

      9d3c2ff258c5d4c06cc51d063c007248

    • SHA1

      02c3af2affe3f5b8cfcc0721e12a71df12c6c6ba

    • SHA256

      f43c76a153e03551456a21ebd15a07017fbabd51a1080752ddb5241f9d599782

    • SHA512

      bbaad7a55d563b742530527cab1384edb4fdf868e6d3524fafd282ce21446c622df9ebca2d096f843ad8489a5a474005fb41977a03978772d7394ce052034cde

    • SSDEEP

      24576:i5o3PDoj9ii8hW5YdFswKy+/3IJ7irH9C1Fs:i5APhRh4FwKycro

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks