Overview

overview

10

Static

static

10

b5b725e6cd...a4.dll

windows7-x64

10

b5b725e6cd...a4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5b725e6cd1a61815421cf1709d385a4

  • Size

    1.3MB

  • Sample

    240305-1fyg6saa6z

  • MD5

    b5b725e6cd1a61815421cf1709d385a4

  • SHA1

    1854e83f2aea3b098228f702829b035f243fd425

  • SHA256

    038be2bd9fadc68387b35a0fddc8a90b5481452d5363a7d65bcf146afc78e29b

  • SHA512

    b5814069f52cf684a65efd4f670f9795f15c7484801e76346bd145186f9da664fea12f750e25c0df563b85e4688898eee5167accf87f006275fad4be6407aae3

  • SSDEEP

    24576:VcF2ZKxe3vVqJO0TbCsmp2Hvjmhghl2J/yd1uu0ATf9:WqdqyuLXlw/C1uuLT1

Score
10/10
danabot5bankertrojan

Malware Config

Extracted

Family

danabot

Botnet

5

C2

192.210.222.81:443

23.229.29.48:443

5.9.224.204:443
Attributes
  • embedded_hash

    9DA7F8A90163192F72181508365A7F8E

  • type

    loader

rsa_pubkey.plain
rsa_privkey.plain

Targets

    • Target

      b5b725e6cd1a61815421cf1709d385a4

    • Size

      1.3MB

    • MD5

      b5b725e6cd1a61815421cf1709d385a4

    • SHA1

      1854e83f2aea3b098228f702829b035f243fd425

    • SHA256

      038be2bd9fadc68387b35a0fddc8a90b5481452d5363a7d65bcf146afc78e29b

    • SHA512

      b5814069f52cf684a65efd4f670f9795f15c7484801e76346bd145186f9da664fea12f750e25c0df563b85e4688898eee5167accf87f006275fad4be6407aae3

    • SSDEEP

      24576:VcF2ZKxe3vVqJO0TbCsmp2Hvjmhghl2J/yd1uu0ATf9:WqdqyuLXlw/C1uuLT1

    Score
    10/10
    danabot5bankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks