• Chethan NP

This paper features about Danabot, which is a malicious. The emails containing a malicious URL that is sent to a Word Document which contains macros embedded with a powershell script. The embedded script was loaded to potential victims in Australia, via verifying the client’s IP geolocation. If there are results as successful, the second stage malware (DanaBot) would be sent. This bot is a trojan which includes such as banking web site injections and other stealer functionality. This malware connects using raw TCP connections to port 443 and downloads additional modules

Danabot

"Danabot a banking trojan", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.6, Issue 4, page no.644-648, April-2019, Available :http://www.jetir.org/papers/JETIR1904A94.pdf

"Danabot a banking trojan", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.6, Issue 4, page no. pp644-648, April-2019, Available at : http://www.jetir.org/papers/JETIR1904A94.pdf