General
- Target efb485724b6fc6444beda28cb93c00dc285444c8185e4a97e5b692e640d9732e
- Size 1.2MB
- Sample261108-d23mpatx8p
- SHA256 efb485724b6fc6444beda28cb93c00dc285444c8185e4a97e5b692e640d9732e
Score
10/10
Malware Config
Targets
-
- Target efb485724b6fc6444beda28cb93c00dc285444c8185e4a97e5b692e640d9732e
- Size 1.2MB
- SHA256 efb485724b6fc6444beda28cb93c00dc285444c8185e4a97e5b692e640d9732e
Score10/10Family: Danabot
Danabot is a modular banking Trojan that has been linked with other malware.
UAC bypass
Downloads MZ/PE file
Executes dropped EXE
Adds Run key to start application
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1