Overview

overview

10

Static

static

10

9131359268...ba.dll

windows7-x64

10

9131359268...ba.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9280ec2c531516f8655c5033916b6a45.zip

  • Size

    559KB

  • Sample

    240831-mzt27szdnb

  • MD5

    6d674217715ae457afcadb3d36e0516b

  • SHA1

    e3e15a42413fe3be4982946a4ca3deb4a0f0bb9a

  • SHA256

    3bfb84e1c00d5fedb20e9b3a29a3f6b8cc6893d24c292fa613c8d646d15447b2

  • SHA512

    65dbd313ea6a4b9df643587be96c8163ac8e8c94f9142dc387a174c170f4c5772b8d131b0f1c8ac1ef164a2403083890f5910d030e23d3d9612b248294b0f0b6

  • SSDEEP

    12288:tRfijRKslSyb/V5UNERiQkUszLNiupLCxfQc:rKtFkyx5UypkrNxpLIfQc

Score
10/10
danabot4bankerdiscoverytrojan

Malware Config

Extracted

Family

danabot

Botnet

4

C2

192.119.110.73:443

192.236.147.159:443

192.210.222.88:443
Attributes
  • embedded_hash

    F4711E27D559B4AEB1A081A1EB0AC465

  • type

    loader

Targets

    • Target

      9131359268037156f0febffe05210583e1c04612dd49d860084aa8b04c67dcba

    • Size

      1.3MB

    • MD5

      9280ec2c531516f8655c5033916b6a45

    • SHA1

      2a7cf3652a657397546fee6dba62faedba2d8992

    • SHA256

      9131359268037156f0febffe05210583e1c04612dd49d860084aa8b04c67dcba

    • SHA512

      50b47394a6db896af3fe18884a05f02451678a8671c2c5eda2746939165e40860550a2445074a0cecf6808cf913b5d6746ccbabf8a048446f1740f383439cd41

    • SSDEEP

      24576:GncFdh7rbCc1XupdscfiyWOrLYgt4LCpo8TJgag:lhe6xOTyP8T

    Score
    10/10
    danabot4bankerdiscoverytrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot Loader Component

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks