General
-
Target
f343eb6d283d4abc937aa660563f9cd6_JaffaCakes118
-
Size
608KB
-
Sample
240416-l6qgxshd4x
-
MD5
f343eb6d283d4abc937aa660563f9cd6
-
SHA1
6ca53fb0701089900a30a827de731742f60abdcb
-
SHA256
00ee5982b993aa27cb849f17b9378f9d451120c49d4d93e4658453a4b30b9d89
-
SHA512
9bb09570d9b266d2ed82c17f1c1c858b07140162f99552ab677435d49fd187c261273b278a86e0d98abd00803a621228b2f85611f6bded500518d2e34673ac1f
-
SSDEEP
12288:aZGQdqOGr1JqydLqQSeCqsVK8kPRGO35N9mVpzXc6:aZ0xWjeCVVK8kP9N9ol
Static task
static1
Behavioral task
behavioral1
Sample
f343eb6d283d4abc937aa660563f9cd6_JaffaCakes118.dll
Resource
win7-20240220-en
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
f343eb6d283d4abc937aa660563f9cd6_JaffaCakes118
-
Size
608KB
-
MD5
f343eb6d283d4abc937aa660563f9cd6
-
SHA1
6ca53fb0701089900a30a827de731742f60abdcb
-
SHA256
00ee5982b993aa27cb849f17b9378f9d451120c49d4d93e4658453a4b30b9d89
-
SHA512
9bb09570d9b266d2ed82c17f1c1c858b07140162f99552ab677435d49fd187c261273b278a86e0d98abd00803a621228b2f85611f6bded500518d2e34673ac1f
-
SSDEEP
12288:aZGQdqOGr1JqydLqQSeCqsVK8kPRGO35N9mVpzXc6:aZ0xWjeCVVK8kP9N9ol
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-