Extracted

• • Target

    JaffaCakes118_69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9

  • Size

    2.3MB

  • MD5

    87ab41a3eb754ff859a264c7114b9066

  • SHA1

    c60a5d955d2f730742341ffa9548fb4d264624d7

  • SHA256

    69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9

  • SHA512

    3a9ef627ec97085f7c607106f72601076020babd79a6badd33bf1614fad49e017f3bbd2d4b1e66197615330c5c7f839a2987ca55e68d0b805be71ae3eda2f2c2

  • SSDEEP

    49152:egLW1DLQjokdvsrJOwDjdHImM6muJtbWWUSBSz5hMtiOc9D7:L+LQcUvsrJVxMqfb5USA5uS

  Score

  10^/10

  danabotbankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot family

    danabot

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2