General
-
Target
eb663da7d960ab7736290075b46998ef_JaffaCakes118
-
Size
604KB
-
Sample
240410-s1vysada23
-
MD5
eb663da7d960ab7736290075b46998ef
-
SHA1
048f6ff1044ecd925654b86f8dbcc62a500691e0
-
SHA256
1c3f402651ec7acc0f84753b8a3913ec5b9abb7e0350fe4c88fce7b3ed364ec0
-
SHA512
c0e05cdc644371aef34b9641d9a493844ad347010886e2447fe44c104c75dd95e560bc5c52e315c719198f5f5c3833f699251a01b4ecaecd30d8733b534d652d
-
SSDEEP
12288:MuIBRuwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbfW/:Dbb4wqyaDA5sTWiXT2tq07G2S/
Static task
static1
Behavioral task
behavioral1
Sample
eb663da7d960ab7736290075b46998ef_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
eb663da7d960ab7736290075b46998ef_JaffaCakes118
-
Size
604KB
-
MD5
eb663da7d960ab7736290075b46998ef
-
SHA1
048f6ff1044ecd925654b86f8dbcc62a500691e0
-
SHA256
1c3f402651ec7acc0f84753b8a3913ec5b9abb7e0350fe4c88fce7b3ed364ec0
-
SHA512
c0e05cdc644371aef34b9641d9a493844ad347010886e2447fe44c104c75dd95e560bc5c52e315c719198f5f5c3833f699251a01b4ecaecd30d8733b534d652d
-
SSDEEP
12288:MuIBRuwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbfW/:Dbb4wqyaDA5sTWiXT2tq07G2S/
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-