General
-
Target
edd988205ba5cd316b4321a77d5811d3_JaffaCakes118
-
Size
1.3MB
-
Sample
240411-twhnbsaf2x
-
MD5
edd988205ba5cd316b4321a77d5811d3
-
SHA1
7a023b0bc5cb613307c97bca673d6422569762ba
-
SHA256
b13a39af4ec228e24e9dec94878cb4f84b99818810c25d3f4f9c0ebda94783fa
-
SHA512
0b8cf0b8866fd51ad039fc43b7ae69e91a0d183104baf03a99d5dc75f3d4dfcd152f5b94ace5600ae9e6c5d229a52ee48e5f930971e727ac193ac10d5be7f985
-
SSDEEP
24576:a8FPiO/eO4ES4b5aRyYhQv54aMsFhAF9ATmwMPGA:BRtRb5R4vsA9ATFMP
Behavioral task
behavioral1
Sample
edd988205ba5cd316b4321a77d5811d3_JaffaCakes118.dll
Resource
win7-20240319-en
Malware Config
Extracted
danabot
15
192.52.166.169:443
173.254.204.95:443
192.52.167.45:443
-
embedded_hash
D6A9A294BFDC6F13BFCC2AB0FA9B54B9
-
type
loader
Targets
-
-
Target
edd988205ba5cd316b4321a77d5811d3_JaffaCakes118
-
Size
1.3MB
-
MD5
edd988205ba5cd316b4321a77d5811d3
-
SHA1
7a023b0bc5cb613307c97bca673d6422569762ba
-
SHA256
b13a39af4ec228e24e9dec94878cb4f84b99818810c25d3f4f9c0ebda94783fa
-
SHA512
0b8cf0b8866fd51ad039fc43b7ae69e91a0d183104baf03a99d5dc75f3d4dfcd152f5b94ace5600ae9e6c5d229a52ee48e5f930971e727ac193ac10d5be7f985
-
SSDEEP
24576:a8FPiO/eO4ES4b5aRyYhQv54aMsFhAF9ATmwMPGA:BRtRb5R4vsA9ATFMP
-
Danabot Loader Component
-
Blocklisted process makes network request
-