General
-
Target
e293e84d3fb294a9deb535012771b947_JaffaCakes118
-
Size
1.3MB
-
Sample
240406-p13f3sbb85
-
MD5
e293e84d3fb294a9deb535012771b947
-
SHA1
f191113b203a629d12c2ac109aab33e2d9c9c96e
-
SHA256
dc9893940f584b6f5aaafb0e3e0a63f6aa64bfa9707786d80613e44446de5567
-
SHA512
0d9f5a32b6b043521510c6258b2ec442d86759f6d904cd4c88fb4ed2b8af0ea10c324b9396e99d7adf850fac37bc66d8197e8e8c729e075ea0411a864d974abc
-
SSDEEP
12288:rs8Fy+Hu9nvTJ94mhVaLg5Hw43vioWAiywzynLunhzhqYn7Dm7ATjqkTnGEvl:Y8FGvTJdYywMKoWABwK6nhzMaTnR
Behavioral task
behavioral1
Sample
e293e84d3fb294a9deb535012771b947_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
danabot
4
23.229.29.48:443
5.9.224.204:443
192.210.222.81:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
e293e84d3fb294a9deb535012771b947_JaffaCakes118
-
Size
1.3MB
-
MD5
e293e84d3fb294a9deb535012771b947
-
SHA1
f191113b203a629d12c2ac109aab33e2d9c9c96e
-
SHA256
dc9893940f584b6f5aaafb0e3e0a63f6aa64bfa9707786d80613e44446de5567
-
SHA512
0d9f5a32b6b043521510c6258b2ec442d86759f6d904cd4c88fb4ed2b8af0ea10c324b9396e99d7adf850fac37bc66d8197e8e8c729e075ea0411a864d974abc
-
SSDEEP
12288:rs8Fy+Hu9nvTJ94mhVaLg5Hw43vioWAiywzynLunhzhqYn7Dm7ATjqkTnGEvl:Y8FGvTJdYywMKoWABwK6nhzMaTnR
-
Danabot Loader Component
-
Blocklisted process makes network request
-