General
-
Target
d7d0af4f5c66a0de05c47bdf0127a90e_JaffaCakes118
-
Size
608KB
-
Sample
240405-s4l52sfh3z
-
MD5
d7d0af4f5c66a0de05c47bdf0127a90e
-
SHA1
1646ba46ee33ae09cc6158fa269def1e655d368d
-
SHA256
991fa9db921aee86ba517c5a34be10e25513789c63b978dc370415a7186dd139
-
SHA512
89e58745c50e1b9bf1e2ddc0ad87554b55ec125aa29237d762a0186e22cd839328c4b06366718bf819d46ffd1a51c46ea52c34f725f14431f64d4f19aab104a7
-
SSDEEP
12288:FZGQdqOG70JqydLqQSeCqsVK8kPRGO35N9mVUzXc6:FZ0QWjeCVVK8kP9N9oY
Static task
static1
Behavioral task
behavioral1
Sample
d7d0af4f5c66a0de05c47bdf0127a90e_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
d7d0af4f5c66a0de05c47bdf0127a90e_JaffaCakes118
-
Size
608KB
-
MD5
d7d0af4f5c66a0de05c47bdf0127a90e
-
SHA1
1646ba46ee33ae09cc6158fa269def1e655d368d
-
SHA256
991fa9db921aee86ba517c5a34be10e25513789c63b978dc370415a7186dd139
-
SHA512
89e58745c50e1b9bf1e2ddc0ad87554b55ec125aa29237d762a0186e22cd839328c4b06366718bf819d46ffd1a51c46ea52c34f725f14431f64d4f19aab104a7
-
SSDEEP
12288:FZGQdqOG70JqydLqQSeCqsVK8kPRGO35N9mVUzXc6:FZ0QWjeCVVK8kP9N9oY
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-