Extracted

• • Target

    445566203252ce39a43be57f5f98ebd0a3665feb5de8d7784ceb57db3909f435.exe

  • Size

    2.5MB

  • MD5

    f1080beac3185a331cbf31b18f60be32

  • SHA1

    687f92f356104aa486a3c2ec90b751e0ab690980

  • SHA256

    445566203252ce39a43be57f5f98ebd0a3665feb5de8d7784ceb57db3909f435

  • SHA512

    4bda349b2a10dd946cb9e69f0460fd1adc5288d73c6fcbbd022292c111e1c0a960be9c4052cc418304277bd46bbf627c10551cba04c4596ab8541b07c3791545

  • SSDEEP

    49152:ZgZziYTt//YDt2Z/fZMdzUAOC5n+LlrxFTGWgKqv:Z0ziYTKh2Z/f6AAOGarxFTG/vv

  Score

  10^/10

  danabot40bankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot Loader Component

  • Danabot family

    danabot

  • Blocklisted process makes network request

  behavioral1behavioral2