Extracted

Extracted

• • Target

    2025-04-02_569e486603b718b78185677c406a8aca_amadey_rhadamanthys_smoke-loader

  • Size

    6.0MB

  • MD5

    569e486603b718b78185677c406a8aca

  • SHA1

    2846fb58ad9d14e810bb78dc4dfa17a4b96140e9

  • SHA256

    642b08effe8f416d65a97a2934d7af4ccff8cff5e3af817ff4b21066c34e3195

  • SHA512

    033217b24aa6559f196db91694041b9628eff8921caf0f9794bb95631d89b7713949ce23bb965861ca852a77e64ac33030513be99cb3ef16337b9693d47f031e

  • SSDEEP

    98304:xT65EZhmqRq+gkSTs+xYRW0ABl3IbfX975PwJuYJRyvmEPPsXUpS3W51iGSfs:xOyRqTs/RW0AAbrjY29PPsEpKWSGss

  Score

  10^/10

  danabot3bankerdiscoveryspywarestealertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Danabot family

    danabot

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1