General
-
Target
9d180b40d96e6e501465aea2ee8614ce_JaffaCakes118
-
Size
604KB
-
Sample
240403-cjg3lacg6x
-
MD5
9d180b40d96e6e501465aea2ee8614ce
-
SHA1
2c136d536ccb8eafeb4e4236396bc6cd1240a871
-
SHA256
3f72e4dab6400c931ceaac42150911473d353e3424a72c1cfe78ea6791090524
-
SHA512
574d504dfda887077a79e8c449c3455958abd62f0c52fb2fa18b00f52e6b6504951bfc0684c355cc222ba34889a1a6e0973f3c991b38abb0aa291a068ad154bb
-
SSDEEP
12288:9uIB/bwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbqW/:I6b4wqyaDA5sTWiXT2tq07G2v/
Static task
static1
Behavioral task
behavioral1
Sample
9d180b40d96e6e501465aea2ee8614ce_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
9d180b40d96e6e501465aea2ee8614ce_JaffaCakes118
-
Size
604KB
-
MD5
9d180b40d96e6e501465aea2ee8614ce
-
SHA1
2c136d536ccb8eafeb4e4236396bc6cd1240a871
-
SHA256
3f72e4dab6400c931ceaac42150911473d353e3424a72c1cfe78ea6791090524
-
SHA512
574d504dfda887077a79e8c449c3455958abd62f0c52fb2fa18b00f52e6b6504951bfc0684c355cc222ba34889a1a6e0973f3c991b38abb0aa291a068ad154bb
-
SSDEEP
12288:9uIB/bwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbqW/:I6b4wqyaDA5sTWiXT2tq07G2v/
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-