General
-
Target
b3b37517a4b3fed4b3f36a12ed3bab01_JaffaCakes118
-
Size
608KB
-
Sample
240404-khx2esae3x
-
MD5
b3b37517a4b3fed4b3f36a12ed3bab01
-
SHA1
5f5486a5c2b8871e47616e7b6057a1dff820d882
-
SHA256
c28ffcfb26e3c131d375874f5e222b770c69c91da313b8568e0f1bb2562ef9be
-
SHA512
1d5a06e57a6932fdaa4724d04b86014560e688d066bff599dd215cb4e9ddce73a941a680592d177f6bf83b595d74fac9a015db00cf0d830e0e6c36e2c2f4623b
-
SSDEEP
12288:LZGQdqOG9NJqydLqQSeCqsVK8kPRGO35N9mVZzXc6O:LZ0/WjeCVVK8kP9N9oVU
Static task
static1
Behavioral task
behavioral1
Sample
b3b37517a4b3fed4b3f36a12ed3bab01_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
b3b37517a4b3fed4b3f36a12ed3bab01_JaffaCakes118
-
Size
608KB
-
MD5
b3b37517a4b3fed4b3f36a12ed3bab01
-
SHA1
5f5486a5c2b8871e47616e7b6057a1dff820d882
-
SHA256
c28ffcfb26e3c131d375874f5e222b770c69c91da313b8568e0f1bb2562ef9be
-
SHA512
1d5a06e57a6932fdaa4724d04b86014560e688d066bff599dd215cb4e9ddce73a941a680592d177f6bf83b595d74fac9a015db00cf0d830e0e6c36e2c2f4623b
-
SSDEEP
12288:LZGQdqOG9NJqydLqQSeCqsVK8kPRGO35N9mVZzXc6O:LZ0/WjeCVVK8kP9N9oVU
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-