Extracted

• • Target

    d68e145ac63ec0be07dcf0160a3b512a417a4ee0c8f35240585ae9b13b636684

  • Size

    2.5MB

  • MD5

    3d79bcdd760f59d372f10fe9aef8544c

  • SHA1

    381a92fec06df17abfda0acbedd16567d1500299

  • SHA256

    d68e145ac63ec0be07dcf0160a3b512a417a4ee0c8f35240585ae9b13b636684

  • SHA512

    f686498381a9341ddf4bc1616f6b06defbfa808ef5fcdde4f7be8113dd13ee5f146b3c032a08e11abaea0dff99baef0be4c4db082e409056364fe516e621e2c0

  • SSDEEP

    49152:TgZziYTf//Y7t2Z/fZMdzUAOC5n+LlrxFTGWsKq:T0ziYTgZ2Z/f6AAOGarxFTGLv

  Score

  10^/10

  danabot40bankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot Loader Component

  • Danabot family

    danabot

  • Blocklisted process makes network request

  behavioral1behavioral2