General
-
Target
e6f5f09c6defe176cc94c30d5c488d9b_JaffaCakes118
-
Size
1.3MB
-
Sample
240408-jjaf3scb29
-
MD5
e6f5f09c6defe176cc94c30d5c488d9b
-
SHA1
1c2773b9238fa34247b45650ebb5cb40a9d52f08
-
SHA256
58b841d956223616126b314b0cee269e8ceb41be666a03ee872d765873ac66d6
-
SHA512
a06bb7342d90d80cec4fe379797704018f83dd1618613b7ad9b15bd67c4212245e0b362a32a564717e7a41ccea23afab60cb202cbddf6a0b1a72ffaea009b8cc
-
SSDEEP
24576:acFPy0Z+UQs5n+VyMjwhP0KsUH4S1qGMTsEbB:hFhQs5r0KsUYQqGMThbB
Behavioral task
behavioral1
Sample
e6f5f09c6defe176cc94c30d5c488d9b_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
danabot
4
23.229.29.48:443
152.89.247.31:443
192.210.222.81:443
-
embedded_hash
6AD9FE4F9E491E785665E0D144F61DAB
-
type
loader
Targets
-
-
Target
e6f5f09c6defe176cc94c30d5c488d9b_JaffaCakes118
-
Size
1.3MB
-
MD5
e6f5f09c6defe176cc94c30d5c488d9b
-
SHA1
1c2773b9238fa34247b45650ebb5cb40a9d52f08
-
SHA256
58b841d956223616126b314b0cee269e8ceb41be666a03ee872d765873ac66d6
-
SHA512
a06bb7342d90d80cec4fe379797704018f83dd1618613b7ad9b15bd67c4212245e0b362a32a564717e7a41ccea23afab60cb202cbddf6a0b1a72ffaea009b8cc
-
SSDEEP
24576:acFPy0Z+UQs5n+VyMjwhP0KsUH4S1qGMTsEbB:hFhQs5r0KsUYQqGMThbB
-
Danabot Loader Component
-
Blocklisted process makes network request
-