General
-
Target
e54582418b350d30da2865d59c87ede5_JaffaCakes118
-
Size
1.3MB
-
Sample
240407-s4cavaga66
-
MD5
e54582418b350d30da2865d59c87ede5
-
SHA1
f4e707ae80c4e14bbb1edd6463be84c3138074e6
-
SHA256
c0419b07dd58f6b7e192bbf1072096d5e3ba10845d6f57d21a0627cbef92a5a7
-
SHA512
98682012212a937707cee9d868cf0c06876a0c2313f00a97301b7eeb0723ebb1742306d55bf17ee4ae9b3072f231ab9fbefd21b240b65346c56f1f24f2c257db
-
SSDEEP
24576:g8FPC2Qw8SdM1WL7M0ulmn5ypHYhaTIzOyQ:TO0QmsfTcQ
Behavioral task
behavioral1
Sample
e54582418b350d30da2865d59c87ede5_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
danabot
15
192.52.166.92:443
173.254.204.95:443
192.52.167.45:443
192.52.167.44:443
-
embedded_hash
5FB075882A84FBF0EC111C1F97633CD9
-
type
loader
Targets
-
-
Target
e54582418b350d30da2865d59c87ede5_JaffaCakes118
-
Size
1.3MB
-
MD5
e54582418b350d30da2865d59c87ede5
-
SHA1
f4e707ae80c4e14bbb1edd6463be84c3138074e6
-
SHA256
c0419b07dd58f6b7e192bbf1072096d5e3ba10845d6f57d21a0627cbef92a5a7
-
SHA512
98682012212a937707cee9d868cf0c06876a0c2313f00a97301b7eeb0723ebb1742306d55bf17ee4ae9b3072f231ab9fbefd21b240b65346c56f1f24f2c257db
-
SSDEEP
24576:g8FPC2Qw8SdM1WL7M0ulmn5ypHYhaTIzOyQ:TO0QmsfTcQ
-
Danabot Loader Component
-
Blocklisted process makes network request
-