General
-
Target
e84028b94d3abf5f753fe4ef54b4427e_JaffaCakes118
-
Size
1.1MB
-
Sample
240408-ydgqjahh89
-
MD5
e84028b94d3abf5f753fe4ef54b4427e
-
SHA1
6b49249dd5b5cddd81a40e043efba289972ad8b2
-
SHA256
55f0976368822adb482407f46a40dcb9e0f2cc7e874d8b67c2bc82d82f7131e0
-
SHA512
e3eb19f516696d187a72006a1eb52375ef5b508605592f2ecc8e830a6352f3b2cd2687607fb00ee340af1664b84eb2e2b5a957a44cb787a18b386e6aabc10668
-
SSDEEP
24576:B67kak6S99HaKXLT75+6LdwjeiCjHoC36i/38mhKMbbojl:B9Xj5+6hiy36i/3jhKMbkj
Static task
static1
Behavioral task
behavioral1
Sample
e84028b94d3abf5f753fe4ef54b4427e_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
danabot
4
23.229.29.48:443
5.9.224.204:443
192.210.222.81:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
e84028b94d3abf5f753fe4ef54b4427e_JaffaCakes118
-
Size
1.1MB
-
MD5
e84028b94d3abf5f753fe4ef54b4427e
-
SHA1
6b49249dd5b5cddd81a40e043efba289972ad8b2
-
SHA256
55f0976368822adb482407f46a40dcb9e0f2cc7e874d8b67c2bc82d82f7131e0
-
SHA512
e3eb19f516696d187a72006a1eb52375ef5b508605592f2ecc8e830a6352f3b2cd2687607fb00ee340af1664b84eb2e2b5a957a44cb787a18b386e6aabc10668
-
SSDEEP
24576:B67kak6S99HaKXLT75+6LdwjeiCjHoC36i/38mhKMbbojl:B9Xj5+6hiy36i/3jhKMbkj
-
Danabot Loader Component
-
Blocklisted process makes network request
-
Loads dropped DLL
-