Overview

overview

10

Static

static

10

4.dll

windows10-1703-x64

10

4.dll

windows7-x64

10

4.dll

windows10-2004-x64

10

4.dll

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4.dll

  • Size

    2.4MB

  • Sample

    240701-vnpmcatcjr

  • MD5

    986d769a639a877a9b8f4fb3c8616911

  • SHA1

    ba1cc29d845d958bd60c989eaa36fdaf9db7ea41

  • SHA256

    c94374155dded12d9f90d16f03470b12b14c4df109a9cf8dbf26e9cd66850457

  • SHA512

    3a1e2a6b57278071906ee2d7b1f9ca6d1ed98084c80512da854e5c1f73e480b92f2b1cceccf87523184bf34250e3cb6a0e1172d7f5478777570f807820d9a187

  • SSDEEP

    24576:yqUUcYHqhhW1bCYo9mvn9YDq+0as+MqYrtaBwSbx3jMUAlZSVV4VHa4k3NkZpyM4:yJmFyqC4aeSN3oRlZyA/o7I3fOis

Score
10/10
danabotbankerbotnettrojan

Malware Config

Extracted

Family

danabot

C2

92.204.160.54

2.56.213.179

45.153.186.47

93.115.21.29

185.45.193.50

193.34.166.247
rsa_pubkey.plain

Targets

    • Target

      4.dll

    • Size

      2.4MB

    • MD5

      986d769a639a877a9b8f4fb3c8616911

    • SHA1

      ba1cc29d845d958bd60c989eaa36fdaf9db7ea41

    • SHA256

      c94374155dded12d9f90d16f03470b12b14c4df109a9cf8dbf26e9cd66850457

    • SHA512

      3a1e2a6b57278071906ee2d7b1f9ca6d1ed98084c80512da854e5c1f73e480b92f2b1cceccf87523184bf34250e3cb6a0e1172d7f5478777570f807820d9a187

    • SSDEEP

      24576:yqUUcYHqhhW1bCYo9mvn9YDq+0as+MqYrtaBwSbx3jMUAlZSVV4VHa4k3NkZpyM4:yJmFyqC4aeSN3oRlZyA/o7I3fOis

    Score
    10/10
    danabotbankertrojan

    • Danabot

      Danabot is a modular banking Trojan that has been linked with other malware.

      trojanbankerdanabot

    • Blocklisted process makes network request

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks