General
-
Target
5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118
-
Size
604KB
-
Sample
240331-wrxb2agd8v
-
MD5
5a5bbd8c04147c15575a07e24bdef22e
-
SHA1
e4506ef09698fb678f9e11190723499e0ee3b0a7
-
SHA256
88a94091ec39cf0fcb60f326e81f2a12ac40c6f41072f04dd0088d9c435e2d31
-
SHA512
11eeabbec6979fadd57d7c8834574b929abdf671d418044042dae8f2e0a24ebeb68a5876eb6394b720c5ae8858792ea8515926d13e1cf4b5a3bd390caabd818c
-
SSDEEP
12288:uuIBfTwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLb2W/:J6b4wqyaDA5sTWiXT2tq07G2L/
Static task
static1
Behavioral task
behavioral1
Sample
5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118
-
Size
604KB
-
MD5
5a5bbd8c04147c15575a07e24bdef22e
-
SHA1
e4506ef09698fb678f9e11190723499e0ee3b0a7
-
SHA256
88a94091ec39cf0fcb60f326e81f2a12ac40c6f41072f04dd0088d9c435e2d31
-
SHA512
11eeabbec6979fadd57d7c8834574b929abdf671d418044042dae8f2e0a24ebeb68a5876eb6394b720c5ae8858792ea8515926d13e1cf4b5a3bd390caabd818c
-
SSDEEP
12288:uuIBfTwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLb2W/:J6b4wqyaDA5sTWiXT2tq07G2L/
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-