Overview

overview

10

Static

static

10

841ae0d54e...18.dll

windows7-x64

10

841ae0d54e...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    841ae0d54eea85a74707df444d53fd6a_JaffaCakes118

  • Size

    1.3MB

  • MD5

    841ae0d54eea85a74707df444d53fd6a

  • SHA1

    ad45b52be3de723952c15b0a8839f83714aed0e3

  • SHA256

    915440164a173d49d3a0d9b84d9705cf47105272ca98109abcd0128dd0cfaeaf

  • SHA512

    5c5ed3c4b84b423c53a03bef575270f5974065294f6e993debe59570f08b562b48a2d80312342bf9efdf21d2bdfe59817e27985351b058dcc9bc672fdcce78e0

  • SSDEEP

    24576:56auUvMeSA11gE6oqn3UdIWR+90fEMPCvZoi6568zDGfV6nwtmbxL9:J73d1o3Gdn1L9

Score
10/10
botnetdanabot

Malware Config

Extracted

Family

danabot

C2

73.48.92.89

193.144.40.26

219.30.45.197

95.179.168.37

151.236.14.84

142.181.133.99

234.63.35.120

74.12.197.16

85.229.148.210

117.69.242.3
rsa_pubkey.plain

Signatures

  • Danabot family
    danabot
  • Danabot x86 payload 1 IoCs

    Detection of Danabot x86 payload, mapped in memory during the execution of its loader.

    botnet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 841ae0d54eea85a74707df444d53fd6a_JaffaCakes118
    .dll windows:5 windows x86 arch:x86

    16910e2eb7e8f331f01c3d5865473690


    Headers

    Imports

    Exports

    Sections