General
-
Target
ba80b5374b01f366c6055033059a7a17_JaffaCakes118
-
Size
608KB
-
Sample
240404-rlrgdaaa3v
-
MD5
ba80b5374b01f366c6055033059a7a17
-
SHA1
b9428855459eddeca3c3fd471affdb6f5ddc7735
-
SHA256
e6a91335c14665172acee0966cde04442baa0c6d5300f2cf22998904597e37b2
-
SHA512
971a70f4b5cd4124d5b92a4ddaaece364142fda763b02fd6782e4da9aa547066548deccd3e1f6f9c8dba0095b34e239b06741448108a2fd70573344b08751eb7
-
SSDEEP
12288:lZGQdqOGEjJqydLqQSeCqsVK8kPRGO35N9mVPzXc6:lZ0uWjeCVVK8kP9N9oL
Static task
static1
Behavioral task
behavioral1
Sample
ba80b5374b01f366c6055033059a7a17_JaffaCakes118.dll
Resource
win7-20240220-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
ba80b5374b01f366c6055033059a7a17_JaffaCakes118
-
Size
608KB
-
MD5
ba80b5374b01f366c6055033059a7a17
-
SHA1
b9428855459eddeca3c3fd471affdb6f5ddc7735
-
SHA256
e6a91335c14665172acee0966cde04442baa0c6d5300f2cf22998904597e37b2
-
SHA512
971a70f4b5cd4124d5b92a4ddaaece364142fda763b02fd6782e4da9aa547066548deccd3e1f6f9c8dba0095b34e239b06741448108a2fd70573344b08751eb7
-
SSDEEP
12288:lZGQdqOGEjJqydLqQSeCqsVK8kPRGO35N9mVPzXc6:lZ0uWjeCVVK8kP9N9oL
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-