General
-
Target
df5c07b23bf94e2f37babc2600bc5c90_JaffaCakes118
-
Size
604KB
-
Sample
240406-jqrzpsee88
-
MD5
df5c07b23bf94e2f37babc2600bc5c90
-
SHA1
f83c8d24ffe6684079538de9a9fa1dcdf0d14713
-
SHA256
f183231649f6afa787e8876c902d6d51b354fff0f2e9f218ffce0f469ad37599
-
SHA512
81939c8f263f655fc261c85087237d4b274cd2f4e2f036ae7c86c5ba15e4a8b4b43e5bcb2e7476c4fb779d1e245fa98c31dd6b0d2accbef3580b01ef3debc565
-
SSDEEP
12288:BuIBwWwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbHW/:c2b4wqyaDA5sTWiXT2tq07G2i/
Static task
static1
Behavioral task
behavioral1
Sample
df5c07b23bf94e2f37babc2600bc5c90_JaffaCakes118.dll
Resource
win7-20231129-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
df5c07b23bf94e2f37babc2600bc5c90_JaffaCakes118
-
Size
604KB
-
MD5
df5c07b23bf94e2f37babc2600bc5c90
-
SHA1
f83c8d24ffe6684079538de9a9fa1dcdf0d14713
-
SHA256
f183231649f6afa787e8876c902d6d51b354fff0f2e9f218ffce0f469ad37599
-
SHA512
81939c8f263f655fc261c85087237d4b274cd2f4e2f036ae7c86c5ba15e4a8b4b43e5bcb2e7476c4fb779d1e245fa98c31dd6b0d2accbef3580b01ef3debc565
-
SSDEEP
12288:BuIBwWwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbHW/:c2b4wqyaDA5sTWiXT2tq07G2i/
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-