Overview

overview

10

Static

static

10

a432db9b4c...68.dll

windows7-x64

10

a432db9b4c...68.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a432db9b4cfed957e5002cd431366268

  • Size

    1.3MB

  • Sample

    240225-thedragc7s

  • MD5

    a432db9b4cfed957e5002cd431366268

  • SHA1

    669d7ff42b91febbaeebdaca57d0050e1af9d9d9

  • SHA256

    3f353236d65c83d0a61f75ecf8b0f497198f6af23d0f4814ece9b627015f1978

  • SHA512

    6adb320dcd4b35bce9974e8a92cf758e3bca00e65cd9717ec762a885bb8047b4f411538add7a582ccad7e9d9a3bda69acfd23bcbf6fd943b7151a2a4a4b4de2f

  • SSDEEP

    24576:scFXBDpmIyz6ApnMxhmbG7l2ms5aR6TPhHy:PpKombAlaTo

Score
10/10
danabot4bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

142.11.244.124:443

142.11.206.50:443
Attributes
  • embedded_hash

    6AD9FE4F9E491E785665E0D144F61DAB

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      a432db9b4cfed957e5002cd431366268

    • Size

      1.3MB

    • MD5

      a432db9b4cfed957e5002cd431366268

    • SHA1

      669d7ff42b91febbaeebdaca57d0050e1af9d9d9

    • SHA256

      3f353236d65c83d0a61f75ecf8b0f497198f6af23d0f4814ece9b627015f1978

    • SHA512

      6adb320dcd4b35bce9974e8a92cf758e3bca00e65cd9717ec762a885bb8047b4f411538add7a582ccad7e9d9a3bda69acfd23bcbf6fd943b7151a2a4a4b4de2f

    • SSDEEP

      24576:scFXBDpmIyz6ApnMxhmbG7l2ms5aR6TPhHy:PpKombAlaTo

    Score
    10/10
    danabot4bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks