Extracted

• • Target

    JaffaCakes118_86510c8848d2ff4351fe01bcede2fe1c

  • Size

    1.2MB

  • MD5

    86510c8848d2ff4351fe01bcede2fe1c

  • SHA1

    18907f49cda72d6601562d6302010000e17f1b5e

  • SHA256

    9494e8d41786a48c0e96fc02fd9fe2c817bf77c65016485ebce3ad382e739870

  • SHA512

    321313214406f3d49ea1032d4c89f884d1f23f7a13b614904768df93db32db5f31fda25c257c9999beee868c0481f3217ad421bdcf76a464a5d630ce146dc2ea

  • SSDEEP

    24576:Dj94q6vSb1136CcqjBvuThWa4ykMP7HUzE/HebQoj/ApyZsOtYgR:Q6b11K1OR2hWh5MjH/+Us/xR

  Score

  10^/10

  danabot4bankerdiscoverytrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot Loader Component

  • Danabot family

    danabot

  • Blocklisted process makes network request

  • Loads dropped DLL

  behavioral1behavioral2