Extracted

• • Target

    f752e26437db762a63b829fabebb3525_JaffaCakes118

  • Size

    1.2MB

  • MD5

    f752e26437db762a63b829fabebb3525

  • SHA1

    a557e21363f5ba571c92e5d6c5aea160f1d209ab

  • SHA256

    db18c9634b57f7b8385699f24968c7a851dc2ed2b464acd5c3d93e8e9a27ce7a

  • SHA512

    1e983a1b860b465d0acca814681c8586c1f815b3eb73895ed19847a287a36e07b6684eb7f218ae39366fc32291c3af2a9d417a58ffe5b19ee5e8e43ea3769b74

  • SSDEEP

    24576:azzsqut9S1A1jLugbQf+tJGOgOO8aBGtPQkq5MJZ+Kqv36L:a/it9nuVfVOOBBGE5MJcXC

  Score

  10^/10

  danabot4bankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot Loader Component

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2