General
-
Target
e64fc2fe4c29809ac2a598251720f9a9_JaffaCakes118
-
Size
1.3MB
-
Sample
240408-br1z1acf47
-
MD5
e64fc2fe4c29809ac2a598251720f9a9
-
SHA1
710ae8a0fe4bf786514eda8e8f83e03ad5d44a75
-
SHA256
3337ae37f1c62b1e284ab2be7ee4492b9b187763ead43f4e03d780c43b64cdb3
-
SHA512
0eaa067bc1dbfa68549c2fa8b1ca165759829bf8a7332cc527fa075ad34e8422ffc181722029226ae93ab0eb0d134f814257723555ea79ee83a4cf9ab6370279
-
SSDEEP
24576:NcF2f8wz+4UI1IXuQr1B76XPgQ2REackn0WTfYSXVm:uzVr1B7GGR3bTE
Behavioral task
behavioral1
Sample
e64fc2fe4c29809ac2a598251720f9a9_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
danabot
4
23.229.29.48:443
5.9.224.204:443
192.210.222.81:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
e64fc2fe4c29809ac2a598251720f9a9_JaffaCakes118
-
Size
1.3MB
-
MD5
e64fc2fe4c29809ac2a598251720f9a9
-
SHA1
710ae8a0fe4bf786514eda8e8f83e03ad5d44a75
-
SHA256
3337ae37f1c62b1e284ab2be7ee4492b9b187763ead43f4e03d780c43b64cdb3
-
SHA512
0eaa067bc1dbfa68549c2fa8b1ca165759829bf8a7332cc527fa075ad34e8422ffc181722029226ae93ab0eb0d134f814257723555ea79ee83a4cf9ab6370279
-
SSDEEP
24576:NcF2f8wz+4UI1IXuQr1B76XPgQ2REackn0WTfYSXVm:uzVr1B7GGR3bTE
-
Danabot Loader Component
-
Blocklisted process makes network request
-