General
-
Target
3ca3ffbc6c18ce0aa8cc2dd8c72b9b2c_JaffaCakes118
-
Size
620KB
-
Sample
240330-qe56hsga38
-
MD5
3ca3ffbc6c18ce0aa8cc2dd8c72b9b2c
-
SHA1
031597e8d4c6d1aa1370bda3026158f4c05e5e7f
-
SHA256
7d938aefd1e3971b1b135badfae052ea71a3be5b0b9a74756717702fcc886e1d
-
SHA512
a7a7f2629fabbe9788bdab744d6e220ae67ea69c0079d025d53adc7840506492c509af23c4b7b6887caf1f8d319b16055eaaf6582061987977b8374a87e76d03
-
SSDEEP
12288:5E6rSiI4Cbs3j09TMmonCh5atbz9+eoQoUZpDd7Da1nX9y15O/zFZx:neyP3j0dMZnCutz4zI5xDwXU7m
Static task
static1
Behavioral task
behavioral1
Sample
3ca3ffbc6c18ce0aa8cc2dd8c72b9b2c_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10222
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
3ca3ffbc6c18ce0aa8cc2dd8c72b9b2c_JaffaCakes118
-
Size
620KB
-
MD5
3ca3ffbc6c18ce0aa8cc2dd8c72b9b2c
-
SHA1
031597e8d4c6d1aa1370bda3026158f4c05e5e7f
-
SHA256
7d938aefd1e3971b1b135badfae052ea71a3be5b0b9a74756717702fcc886e1d
-
SHA512
a7a7f2629fabbe9788bdab744d6e220ae67ea69c0079d025d53adc7840506492c509af23c4b7b6887caf1f8d319b16055eaaf6582061987977b8374a87e76d03
-
SSDEEP
12288:5E6rSiI4Cbs3j09TMmonCh5atbz9+eoQoUZpDd7Da1nX9y15O/zFZx:neyP3j0dMZnCutz4zI5xDwXU7m
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-