General
-
Target
d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118
-
Size
620KB
-
Sample
240405-p4ty4sdc23
-
MD5
d43c607d910f3fadcdcab61c2c02e00d
-
SHA1
0593ba30973c12dba865082d22ef342a38181af0
-
SHA256
e16c031ec8a6e48fae645ca72964343f033c2597476c5b0999ef94316ae7ce7f
-
SHA512
d8ae715d38a321f19e6646f26bac6eb7040559fd461d2f1a835dd35171d9632a92461fb1a26fb3dc1a7c7ccbe2e7d395338f75d22eb45fd26abc888b189d654b
-
SSDEEP
12288:hE6rSia4Ibs3j09TMmonCh5atbz9+eoQoUZpDd7Da1nX9y1XO/zFZx:PeIt3j0dMZnCutz4zI5xDwXUFm
Static task
static1
Behavioral task
behavioral1
Sample
d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10222
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118
-
Size
620KB
-
MD5
d43c607d910f3fadcdcab61c2c02e00d
-
SHA1
0593ba30973c12dba865082d22ef342a38181af0
-
SHA256
e16c031ec8a6e48fae645ca72964343f033c2597476c5b0999ef94316ae7ce7f
-
SHA512
d8ae715d38a321f19e6646f26bac6eb7040559fd461d2f1a835dd35171d9632a92461fb1a26fb3dc1a7c7ccbe2e7d395338f75d22eb45fd26abc888b189d654b
-
SSDEEP
12288:hE6rSia4Ibs3j09TMmonCh5atbz9+eoQoUZpDd7Da1nX9y1XO/zFZx:PeIt3j0dMZnCutz4zI5xDwXUFm
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-