General
-
Target
aad68ea5811a92e04404b16f23ce51fa_JaffaCakes118
-
Size
608KB
-
Sample
240404-asrx2shf89
-
MD5
aad68ea5811a92e04404b16f23ce51fa
-
SHA1
ad052fa58d4274d8e91e8feeb11420569c924ea8
-
SHA256
ed8ca9c5a99f3188e808ae63ec0e51bb70d937953a623bb6ef37c6587f96b1bf
-
SHA512
d5e1dcbb9f43ae35b49e5b5b8070cb55baf2763b10ba7bab973c17e14f0c0f18c748f9cd46bce875870a3f63fdac5d831d79ec26df0f9481da7dea31cf7c5ba3
-
SSDEEP
12288:+ZGQdqOGTMJqydLqQSeCqsVK8kPRGO35N9mVgzXc6T:+Z0AWjeCVVK8kP9N9o8h
Static task
static1
Behavioral task
behavioral1
Sample
aad68ea5811a92e04404b16f23ce51fa_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
aad68ea5811a92e04404b16f23ce51fa_JaffaCakes118
-
Size
608KB
-
MD5
aad68ea5811a92e04404b16f23ce51fa
-
SHA1
ad052fa58d4274d8e91e8feeb11420569c924ea8
-
SHA256
ed8ca9c5a99f3188e808ae63ec0e51bb70d937953a623bb6ef37c6587f96b1bf
-
SHA512
d5e1dcbb9f43ae35b49e5b5b8070cb55baf2763b10ba7bab973c17e14f0c0f18c748f9cd46bce875870a3f63fdac5d831d79ec26df0f9481da7dea31cf7c5ba3
-
SSDEEP
12288:+ZGQdqOGTMJqydLqQSeCqsVK8kPRGO35N9mVgzXc6T:+Z0AWjeCVVK8kP9N9o8h
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-