Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-12-2024 18:08
General
-
Target
f4b783cd81ae0eba7234e0a4d14d47c813b0e8c18b1d8eb00eda6d326b8c6fbe.dll
-
Size
10.2MB
-
MD5
84847c31f1bc2d9067eaf850b753bf55
-
SHA1
2d2a59aca3fab38cad731d1a6398af86f3ee165d
-
SHA256
f4b783cd81ae0eba7234e0a4d14d47c813b0e8c18b1d8eb00eda6d326b8c6fbe
-
SHA512
e17b13b497b030af363dedbe9201ba52ed5f23f040a72146183d2fa3d50f80c4c35a4d1e86c8e0ae2833b446bd8e55b1b4fc4335e01c2b9a8f83aa83dcfc3b2b
-
SSDEEP
98304:2/d01v8YP37/ABdF3R1aw4S5BC19iHWl7NjJkcq/rywXwIS7Hnof:I01v8EL/AnF7aw4S5BCm8Dq/OUoo
Score
10/10
Malware Config
Extracted
Family
danabot
Attributes
-
type
loader
Signatures
-
Danabot
Danabot is a modular banking Trojan that has been linked with other malware.
-
Danabot family
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f4b783cd81ae0eba7234e0a4d14d47c813b0e8c18b1d8eb00eda6d326b8c6fbe.dll,#11⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.8MB
-
Filesize
7.8MB
-
Filesize
632KB
-
Filesize
2.5MB
-
Filesize
632KB
-
Filesize
2.5MB
-
Filesize
10.3MB
-
Filesize
7.8MB