General
-
Target
eb612a538865c6a34250e6495aa5bfee_JaffaCakes118
-
Size
1.3MB
-
Sample
240410-stlrjafg8w
-
MD5
eb612a538865c6a34250e6495aa5bfee
-
SHA1
468e1eddff7b5f26a1a66a4fb8ce716abe74d2d7
-
SHA256
cb342c6c4742d9604cdfcc6410192e908a3c59b47f6d4ae9d2c762cfe349c6ed
-
SHA512
e0a76b820d21e8c37542a93bd5e16ba464c2905c9eafbd0480efcdc67c765f83c0d1e65a7ef15a2d789fa4bf8b9c83f917d3da3319d755e6a4732a7817cc8ad5
-
SSDEEP
24576:kcF2VtrZmrDEtLk7Kd/FFdf+BawXHvJbSc9W0HTR7McbtV:HzyFJ+3Sc9W0HT5Mo
Behavioral task
behavioral1
Sample
eb612a538865c6a34250e6495aa5bfee_JaffaCakes118.dll
Resource
win7-20231129-en
Malware Config
Extracted
danabot
4
5.9.224.204:443
192.210.222.81:443
23.229.29.48:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
eb612a538865c6a34250e6495aa5bfee_JaffaCakes118
-
Size
1.3MB
-
MD5
eb612a538865c6a34250e6495aa5bfee
-
SHA1
468e1eddff7b5f26a1a66a4fb8ce716abe74d2d7
-
SHA256
cb342c6c4742d9604cdfcc6410192e908a3c59b47f6d4ae9d2c762cfe349c6ed
-
SHA512
e0a76b820d21e8c37542a93bd5e16ba464c2905c9eafbd0480efcdc67c765f83c0d1e65a7ef15a2d789fa4bf8b9c83f917d3da3319d755e6a4732a7817cc8ad5
-
SSDEEP
24576:kcF2VtrZmrDEtLk7Kd/FFdf+BawXHvJbSc9W0HTR7McbtV:HzyFJ+3Sc9W0HT5Mo
-
Danabot Loader Component
-
Blocklisted process makes network request
-