Overview

overview

10

Static

static

3

5da444e167...36.dll

windows7-x64

10

5da444e167...36.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5da444e167060cc387a6f96af1ad5778fdec95e15a5864b3fac2785716c38236

  • Size

    3.2MB

  • Sample

    241119-22tlsavhkp

  • MD5

    d19c7a7770b3aaf74de220749a19c4bb

  • SHA1

    89a71834257ed0afca7d66246f1aa1a37d5a8c6f

  • SHA256

    5da444e167060cc387a6f96af1ad5778fdec95e15a5864b3fac2785716c38236

  • SHA512

    a38883f386d7335d44ad3a4205a0133f9232b2f0d9e2550977dacb72eea4194f686aa8395cfc1428e0d214befc58f13788ef5bf614d36dc5956c560ef18b5d21

  • SSDEEP

    49152:cHfTYgeIaAX3JGBeUg0uOsEUoc077Hf1wSylsxFcT3V:cHfTYgeIaAX5GYUgmc0Hf1wSyl1

Score
10/10
danabotbankerdiscoverytrojan

Malware Config

Extracted

Family

danabot

C2

188.191.106.71:443

81.17.28.84:443

185.62.57.77:443

185.145.96.115:443
Attributes
  • embedded_hash

    8573D056D0591C7BF26B78722FFD02C1

  • type

    loader

Targets

    • Target

      5da444e167060cc387a6f96af1ad5778fdec95e15a5864b3fac2785716c38236

    • Size

      3.2MB

    • MD5

      d19c7a7770b3aaf74de220749a19c4bb

    • SHA1

      89a71834257ed0afca7d66246f1aa1a37d5a8c6f

    • SHA256

      5da444e167060cc387a6f96af1ad5778fdec95e15a5864b3fac2785716c38236

    • SHA512

      a38883f386d7335d44ad3a4205a0133f9232b2f0d9e2550977dacb72eea4194f686aa8395cfc1428e0d214befc58f13788ef5bf614d36dc5956c560ef18b5d21

    • SSDEEP

      49152:cHfTYgeIaAX3JGBeUg0uOsEUoc077Hf1wSylsxFcT3V:cHfTYgeIaAX5GYUgmc0Hf1wSyl1

    Score
    10/10
    danabotbankerdiscoverytrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Danabot family

      danabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks