Extracted

• • Target

    4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629

  • Size

    1.9MB

  • MD5

    a7369c2914d236bfe99a5b75b44cb189

  • SHA1

    8b3016131e9d7181af3c0ea49552ecb78819264f

  • SHA256

    4970420398123241f7d255b423ba654290086fd575277625d4782e165fa81629

  • SHA512

    ad593b7353df46de458bd1e32a2b791bcac4776701dca047180a278c5435fbb38d0b557a2eab16d64c2432ec9e903010115ab264c520293381abb0bc2544e4a4

  • SSDEEP

    49152:BQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4BTeFqfn8+nFFQCxEsJwKQq:BfaNQh+NUABO/c0Y9AdQFqf8+gqJW

  Score

  10^/10

  danabot40bankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot Loader Component

  • Danabot family

    danabot

  • Blocklisted process makes network request

  behavioral1behavioral2