Overview

overview

10

Static

static

10

4.dll

windows10-1703-x64

10

4.dll

windows7-x64

10

4.dll

windows10-2004-x64

10

4.dll

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4.dll

  • Size

    2.4MB

  • MD5

    986d769a639a877a9b8f4fb3c8616911

  • SHA1

    ba1cc29d845d958bd60c989eaa36fdaf9db7ea41

  • SHA256

    c94374155dded12d9f90d16f03470b12b14c4df109a9cf8dbf26e9cd66850457

  • SHA512

    3a1e2a6b57278071906ee2d7b1f9ca6d1ed98084c80512da854e5c1f73e480b92f2b1cceccf87523184bf34250e3cb6a0e1172d7f5478777570f807820d9a187

  • SSDEEP

    24576:yqUUcYHqhhW1bCYo9mvn9YDq+0as+MqYrtaBwSbx3jMUAlZSVV4VHa4k3NkZpyM4:yJmFyqC4aeSN3oRlZyA/o7I3fOis

Score
10/10
botnetdanabot

Malware Config

Extracted

Family

danabot

C2

92.204.160.54

2.56.213.179

45.153.186.47

93.115.21.29

185.45.193.50

193.34.166.247
rsa_pubkey.plain

Signatures

  • Danabot family
    danabot
  • Danabot x86 payload 1 IoCs

    Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

    botnet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4.dll
    .dll windows:5 windows x86 arch:x86

    98b75355cb241c6e971ad1c912dbfec7


    Headers

    Imports

    Exports

    Sections