General
-
Target
ab9ac26fdcd9190e45354a0add175d97_JaffaCakes118
-
Size
608KB
-
Sample
240404-bj1n9sac71
-
MD5
ab9ac26fdcd9190e45354a0add175d97
-
SHA1
99ae61c494a5f16fbc3442f5de0cd410fd10f859
-
SHA256
df87037518726d34f0637ff19d0f0fd3435e8635a6ec39088d2a9b735cea02ea
-
SHA512
c3b1877b3c040c0cfcf0f65165e6fabaf0bc282597f8a3e6a77abaeedcbfdbc14c977d8621dcf47ec8e8f2cf14f4128185451bc1ab625c62b4cfe72c0b96e913
-
SSDEEP
12288:tZGQdqOGHbJqydLqQSeCqsVK8kPRGO35N9mVjzXc6:tZ0jWjeCVVK8kP9N9on
Static task
static1
Behavioral task
behavioral1
Sample
ab9ac26fdcd9190e45354a0add175d97_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
ab9ac26fdcd9190e45354a0add175d97_JaffaCakes118
-
Size
608KB
-
MD5
ab9ac26fdcd9190e45354a0add175d97
-
SHA1
99ae61c494a5f16fbc3442f5de0cd410fd10f859
-
SHA256
df87037518726d34f0637ff19d0f0fd3435e8635a6ec39088d2a9b735cea02ea
-
SHA512
c3b1877b3c040c0cfcf0f65165e6fabaf0bc282597f8a3e6a77abaeedcbfdbc14c977d8621dcf47ec8e8f2cf14f4128185451bc1ab625c62b4cfe72c0b96e913
-
SSDEEP
12288:tZGQdqOGHbJqydLqQSeCqsVK8kPRGO35N9mVjzXc6:tZ0jWjeCVVK8kP9N9on
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-