danabot | 7513e040f6ea833518b7dbac6be9b7e4a03be8cc01f862cca5f2afdab7d9c5d2 | Triage

Submit
Reports

Overview

overview

Static

static

3

7513e040f6...2N.dll

windows7-x64

7513e040f6...2N.dll

windows10-2004-x64

Sharing

General

Target

7513e040f6ea833518b7dbac6be9b7e4a03be8cc01f862cca5f2afdab7d9c5d2N
Size

1.9MB
Sample

241110-lhxw4atglq
MD5

87007292d367f57cd33429b47f5be620
SHA1

1014618bc41d4091b1a796532b49251168e457a4
SHA256

7513e040f6ea833518b7dbac6be9b7e4a03be8cc01f862cca5f2afdab7d9c5d2
SHA512

e875fe87b5b5b051c024e56b8a0f340625749921f5d614ef573aa1584c9f6084b2b4667675e994729a2ae9663c43c26e446c0f6a15bd30164700e39e91972b2f
SSDEEP

49152:gQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Bfehqfn8+nFFQCxEsJwKQi:gfaNQh+NUABO/c0Y9AdUhqf8+gqJW

Score

10^/10

danabot 40 banker discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7513e040f6ea833518b7dbac6be9b7e4a03be8cc01f862cca5f2afdab7d9c5d2N.dll

Resource

win7-20241010-en

danabot 40 banker discovery trojan

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

7513e040f6ea833518b7dbac6be9b7e4a03be8cc01f862cca5f2afdab7d9c5d2N.dll

Resource

win10v2004-20241007-en

danabot 40 banker discovery trojan

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Extracted

Family

danabot

Botnet

40

C2

185.117.90.36:443

193.42.36.59:443

193.56.146.53:443

185.106.123.228:443

Attributes

embedded_hash
07284E2A3AB3C2E1FFFBD425849BE150
type
loader

rsa_pubkey.plain

rsa_privkey.plain

Targets

- Target
  
  7513e040f6ea833518b7dbac6be9b7e4a03be8cc01f862cca5f2afdab7d9c5d2N
- Size
  
  1.9MB
- MD5
  
  87007292d367f57cd33429b47f5be620
- SHA1
  
  1014618bc41d4091b1a796532b49251168e457a4
- SHA256
  
  7513e040f6ea833518b7dbac6be9b7e4a03be8cc01f862cca5f2afdab7d9c5d2
- SHA512
  
  e875fe87b5b5b051c024e56b8a0f340625749921f5d614ef573aa1584c9f6084b2b4667675e994729a2ae9663c43c26e446c0f6a15bd30164700e39e91972b2f
- SSDEEP
  
  49152:gQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Bfehqfn8+nFFQCxEsJwKQi:gfaNQh+NUABO/c0Y9AdUhqf8+gqJW
Score

10^/10

danabot 40 banker discovery trojan
- Danabot
  Danabot is a modular banking Trojan that has been linked with other malware.
  trojan banker danabot
- Danabot Loader Component
- Danabot family
  danabot
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

danabot40bankerdiscoverytrojan

behavioral2

danabot40bankerdiscoverytrojan

© 2018-2024

Terms | Privacy