General
-
Target
a77a0a1e3e245240b2f827d031ba4510_JaffaCakes118
-
Size
1.2MB
-
Sample
240403-1mkvnadg21
-
MD5
a77a0a1e3e245240b2f827d031ba4510
-
SHA1
6bfaeef8171e2f3b3d6d5abd9a7b02450ab22d42
-
SHA256
4fbb399e44f5e84cbc719d8e99028029adf60f524ebebab04d22513daf3bce9c
-
SHA512
332d42de83f2b6d7bb0410951ce7aff372b4133974a4909e6231d2fb8fb585987974b4491a393f54a6c87a63743e042e2321379d996b482f65eed7cec17c195a
-
SSDEEP
24576:J1VqL5OBAbNy307nscZDFigU1XJUJgfUR05G3E0tqN+TUx7cB44bYrhs3c:D4fs4sZgv325G3E0QNcK4bYrh
Static task
static1
Behavioral task
behavioral1
Sample
a77a0a1e3e245240b2f827d031ba4510_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
danabot
4
192.119.110.73:443
192.236.147.159:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
a77a0a1e3e245240b2f827d031ba4510_JaffaCakes118
-
Size
1.2MB
-
MD5
a77a0a1e3e245240b2f827d031ba4510
-
SHA1
6bfaeef8171e2f3b3d6d5abd9a7b02450ab22d42
-
SHA256
4fbb399e44f5e84cbc719d8e99028029adf60f524ebebab04d22513daf3bce9c
-
SHA512
332d42de83f2b6d7bb0410951ce7aff372b4133974a4909e6231d2fb8fb585987974b4491a393f54a6c87a63743e042e2321379d996b482f65eed7cec17c195a
-
SSDEEP
24576:J1VqL5OBAbNy307nscZDFigU1XJUJgfUR05G3E0tqN+TUx7cB44bYrhs3c:D4fs4sZgv325G3E0QNcK4bYrh
-
Danabot Loader Component
-
Blocklisted process makes network request
-
Loads dropped DLL
-