Overview

overview

10

Static

static

10

841ae0d54e...18.dll

windows7-x64

10

841ae0d54e...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    841ae0d54eea85a74707df444d53fd6a_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240530-ntn5faga3y

  • MD5

    841ae0d54eea85a74707df444d53fd6a

  • SHA1

    ad45b52be3de723952c15b0a8839f83714aed0e3

  • SHA256

    915440164a173d49d3a0d9b84d9705cf47105272ca98109abcd0128dd0cfaeaf

  • SHA512

    5c5ed3c4b84b423c53a03bef575270f5974065294f6e993debe59570f08b562b48a2d80312342bf9efdf21d2bdfe59817e27985351b058dcc9bc672fdcce78e0

  • SSDEEP

    24576:56auUvMeSA11gE6oqn3UdIWR+90fEMPCvZoi6568zDGfV6nwtmbxL9:J73d1o3Gdn1L9

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

73.48.92.89

193.144.40.26

219.30.45.197

95.179.168.37

151.236.14.84

142.181.133.99

234.63.35.120

74.12.197.16

85.229.148.210

117.69.242.3
rsa_pubkey.plain

Targets

    • Target

      841ae0d54eea85a74707df444d53fd6a_JaffaCakes118

    • Size

      1.3MB

    • MD5

      841ae0d54eea85a74707df444d53fd6a

    • SHA1

      ad45b52be3de723952c15b0a8839f83714aed0e3

    • SHA256

      915440164a173d49d3a0d9b84d9705cf47105272ca98109abcd0128dd0cfaeaf

    • SHA512

      5c5ed3c4b84b423c53a03bef575270f5974065294f6e993debe59570f08b562b48a2d80312342bf9efdf21d2bdfe59817e27985351b058dcc9bc672fdcce78e0

    • SSDEEP

      24576:56auUvMeSA11gE6oqn3UdIWR+90fEMPCvZoi6568zDGfV6nwtmbxL9:J73d1o3Gdn1L9

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks