General
-
Target
ea3d351a11b2b462b0993bf315634888_JaffaCakes118
-
Size
664KB
-
Sample
240409-r8c79sdc4w
-
MD5
ea3d351a11b2b462b0993bf315634888
-
SHA1
2cfb5690c0d61c5043d906f830bbe408f874f7b9
-
SHA256
af642ae23696b4b2897ee3a5756c81a82eeb9071053a1eabbd4eeeb0eb05efca
-
SHA512
a1484a92c49df77e16b5fb58ee821e059387343bb1a20182d30a15fdad839cd90a854418582ef535cf8978fce7a6658fec8aa62dc19ee820057266b46c58031e
-
SSDEEP
12288:5/0Qzqf0e/i48fM+6TFKywVt6PbEYU0eyJTT/Mu9oV01ujoaEP:p0zh/cn6TFKywvCbEOxDMu9oyNaEP
Static task
static1
Behavioral task
behavioral1
Sample
ea3d351a11b2b462b0993bf315634888_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10222
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
ea3d351a11b2b462b0993bf315634888_JaffaCakes118
-
Size
664KB
-
MD5
ea3d351a11b2b462b0993bf315634888
-
SHA1
2cfb5690c0d61c5043d906f830bbe408f874f7b9
-
SHA256
af642ae23696b4b2897ee3a5756c81a82eeb9071053a1eabbd4eeeb0eb05efca
-
SHA512
a1484a92c49df77e16b5fb58ee821e059387343bb1a20182d30a15fdad839cd90a854418582ef535cf8978fce7a6658fec8aa62dc19ee820057266b46c58031e
-
SSDEEP
12288:5/0Qzqf0e/i48fM+6TFKywVt6PbEYU0eyJTT/Mu9oV01ujoaEP:p0zh/cn6TFKywvCbEOxDMu9oyNaEP
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-