General
-
Target
ebd6140c7b7acf0306c3ed55adc3ea8d_JaffaCakes118
-
Size
1.3MB
-
Sample
240410-ybyahacg5y
-
MD5
ebd6140c7b7acf0306c3ed55adc3ea8d
-
SHA1
0468a40ed02da18ad643d15242323872fc1e7d49
-
SHA256
6cf2c73e600f921a1ed639e8972745d018d70587442a0431d189490f47180962
-
SHA512
906b08aea24f29e3d124c038ac89fbf954861007049b32204434b45805c7a6253082f71a27c8c77b87726f2274a66c60442e4696f599440f9c831a8caa4063a7
-
SSDEEP
24576:/8pWEmBQql4Jyu9WoTqnona5rlUsf65FX0Z0TiZ:Ub1tnMrlLS5F1T4
Behavioral task
behavioral1
Sample
ebd6140c7b7acf0306c3ed55adc3ea8d_JaffaCakes118.dll
Resource
win7-20231129-en
Malware Config
Extracted
danabot
4
23.229.29.48:443
5.9.224.204:443
192.210.222.81:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
ebd6140c7b7acf0306c3ed55adc3ea8d_JaffaCakes118
-
Size
1.3MB
-
MD5
ebd6140c7b7acf0306c3ed55adc3ea8d
-
SHA1
0468a40ed02da18ad643d15242323872fc1e7d49
-
SHA256
6cf2c73e600f921a1ed639e8972745d018d70587442a0431d189490f47180962
-
SHA512
906b08aea24f29e3d124c038ac89fbf954861007049b32204434b45805c7a6253082f71a27c8c77b87726f2274a66c60442e4696f599440f9c831a8caa4063a7
-
SSDEEP
24576:/8pWEmBQql4Jyu9WoTqnona5rlUsf65FX0Z0TiZ:Ub1tnMrlLS5F1T4
-
Danabot Loader Component
-
Blocklisted process makes network request
-