General
-
Target
b66af073a05e07af9fc3b77b8c29fe6f
-
Size
1.3MB
-
Sample
240306-d7wfkaab71
-
MD5
b66af073a05e07af9fc3b77b8c29fe6f
-
SHA1
0cac4a7c6a078db736c0fb759d989b8e2c5bca2b
-
SHA256
237f092c2704352d23ad99ab3ada366a883cd0a7be3a4fbc9c9c38890ebe1572
-
SHA512
f348b987f3825fcb5c5d30db91245e4b9a82df8d699e802c55044475d8a208332253cb849e8af9adb56d8254cb53f051d9d9c805258ea7e33843c5b14d6ffb57
-
SSDEEP
24576:1ncFdF9FLlCcGFyiVcsPIwoJOL0s+uwkTiY0ELU4K:S2cw/IlJgrTT0Th
Behavioral task
behavioral1
Sample
b66af073a05e07af9fc3b77b8c29fe6f.dll
Resource
win7-20240221-en
Malware Config
Extracted
danabot
5
192.210.222.81:443
23.229.29.48:443
5.9.224.204:443
192.255.166.212:443
-
embedded_hash
100700D372965A717E89B8C909E1D8D4
-
type
loader
Targets
-
-
Target
b66af073a05e07af9fc3b77b8c29fe6f
-
Size
1.3MB
-
MD5
b66af073a05e07af9fc3b77b8c29fe6f
-
SHA1
0cac4a7c6a078db736c0fb759d989b8e2c5bca2b
-
SHA256
237f092c2704352d23ad99ab3ada366a883cd0a7be3a4fbc9c9c38890ebe1572
-
SHA512
f348b987f3825fcb5c5d30db91245e4b9a82df8d699e802c55044475d8a208332253cb849e8af9adb56d8254cb53f051d9d9c805258ea7e33843c5b14d6ffb57
-
SSDEEP
24576:1ncFdF9FLlCcGFyiVcsPIwoJOL0s+uwkTiY0ELU4K:S2cw/IlJgrTT0Th
-
Danabot Loader Component
-
Blocklisted process makes network request
-