Extracted

• • Target

    5c4be8a6f603ad370faf40495e09a1e0_JaffaCakes118

  • Size

    1.1MB

  • MD5

    5c4be8a6f603ad370faf40495e09a1e0

  • SHA1

    ae73d7b7011241f03b21a98403bb36c358885716

  • SHA256

    55b1165d0a7b6ea8b2dddd175b0778a1bf9eae87f1f05b5e7063083b7046f409

  • SHA512

    e24a2d9e00b72de92285817b0ec0adfeed696f87f8f503e9735b26e0d071340f20c8a6911bd699febff20d2d9db3bd35498a72e73c1868fd320a0756f4d75536

  • SSDEEP

    24576:G+mN/IrnEaYvmU8u+FRhJyC0RmkZPoInGEz0kbNkm6V4izI:K/IrESru+FRB0UkQIGEzPZ

  Score

  10^/10

  danabot4bankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot Loader Component

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2