General
-
Target
e996cc3a4c4f4de8e98679bbdaeb6151_JaffaCakes118
-
Size
1.3MB
-
Sample
240409-kjvyfsag99
-
MD5
e996cc3a4c4f4de8e98679bbdaeb6151
-
SHA1
43409cfaa0d31a45643bad6f2bebd1bc88067f9f
-
SHA256
f7fa3aceeed9165fe7ed160c396bd6358bd6661f87a18e9a2e394a60d691cd6f
-
SHA512
3aaafb108e2cd6f017b061daa8260fa9174e684bd8d59034a48b649959c25eea26a16c01d48c88c3f592adb8f85c34117c1b9ced9bd28abac6423de8e72d746c
-
SSDEEP
12288:Rs8Fy+Hu9nw6tFp6ot29eFKr75Tyw+t3yOYTdNxfYkTKn/LoJ8vsuara:O8FGw6HZs9eFKfEwMNuRRTKnzJra
Behavioral task
behavioral1
Sample
e996cc3a4c4f4de8e98679bbdaeb6151_JaffaCakes118.dll
Resource
win7-20240220-en
Malware Config
Extracted
danabot
4
23.229.29.48:443
5.9.224.204:443
192.210.222.81:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
e996cc3a4c4f4de8e98679bbdaeb6151_JaffaCakes118
-
Size
1.3MB
-
MD5
e996cc3a4c4f4de8e98679bbdaeb6151
-
SHA1
43409cfaa0d31a45643bad6f2bebd1bc88067f9f
-
SHA256
f7fa3aceeed9165fe7ed160c396bd6358bd6661f87a18e9a2e394a60d691cd6f
-
SHA512
3aaafb108e2cd6f017b061daa8260fa9174e684bd8d59034a48b649959c25eea26a16c01d48c88c3f592adb8f85c34117c1b9ced9bd28abac6423de8e72d746c
-
SSDEEP
12288:Rs8Fy+Hu9nw6tFp6ot29eFKr75Tyw+t3yOYTdNxfYkTKn/LoJ8vsuara:O8FGw6HZs9eFKfEwMNuRRTKnzJra
-
Danabot Loader Component
-
Blocklisted process makes network request
-