Extracted

• • Target

    312d8083fe2dbd59acc81e65e8e285a0_JaffaCakes118

  • Size

    1.1MB

  • MD5

    312d8083fe2dbd59acc81e65e8e285a0

  • SHA1

    51306d281aa55caf447f262ffdd66b03cd591b5d

  • SHA256

    b3691a5779d82c3ff7836f9fa9788c9e18f5f57c037c528116e2a88251aeea9f

  • SHA512

    3c5dcd841c947132d5717c66e1c450771c0cf8a13a0260ad3ca54732c69b905025f9754d3b08607f15c7bdb38eed5214e4c37c53a6fc9ed8327265d7d4d329ce

  • SSDEEP

    24576:3eU3Q/TwXxsPhdRf8bNw4eyPLaqAs6AbExVU8DmbBnNmuYXkAHCr8lO:uCSPhdWGydA403mbWJXkuCAlO

  Score

  10^/10

  danabot4bankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot Loader Component

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2