Overview

overview

10

Static

static

3

9b928d461f...0N.dll

windows7-x64

10

9b928d461f...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b928d461f92ebec072598b42dcca580N.exe

  • Size

    4.3MB

  • Sample

    240830-h3flrstcpk

  • MD5

    9b928d461f92ebec072598b42dcca580

  • SHA1

    351c3e2ab0c7db448f38e7a512d0e237706b88b5

  • SHA256

    b2a1f1d3add12ea02f00c2405f1ce53c851fcea25d6d0434c4d2129e34945394

  • SHA512

    619d3ca040b78eede38561331ebadae71ecd6b03bb580362fa9c7b5be979ff27c445487a0482374723a9d8b9964f47585dc9f406a0de53700c35f4fd0ba52e4f

  • SSDEEP

    98304:2Ekp3AUUgGFofLw++PxAbc5rh5Ar/04TAiP:gp31UtFmLw95Abc5rh5Ar/NTA

Score
10/10
danabotbankerdiscoverytrojan

Malware Config

Extracted

Family

danabot

C2

172.93.193.231:443

192.236.163.13:443

152.89.247.216:443

103.144.139.157:443
Attributes
  • type

    loader

Targets

    • Target

      9b928d461f92ebec072598b42dcca580N.exe

    • Size

      4.3MB

    • MD5

      9b928d461f92ebec072598b42dcca580

    • SHA1

      351c3e2ab0c7db448f38e7a512d0e237706b88b5

    • SHA256

      b2a1f1d3add12ea02f00c2405f1ce53c851fcea25d6d0434c4d2129e34945394

    • SHA512

      619d3ca040b78eede38561331ebadae71ecd6b03bb580362fa9c7b5be979ff27c445487a0482374723a9d8b9964f47585dc9f406a0de53700c35f4fd0ba52e4f

    • SSDEEP

      98304:2Ekp3AUUgGFofLw++PxAbc5rh5Ar/04TAiP:gp31UtFmLw95Abc5rh5Ar/NTA

    Score
    10/10
    danabotbankerdiscoverytrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks