General
-
Target
f6a4b5eae090b0b2f60d81f8996d87a1_JaffaCakes118
-
Size
1.4MB
-
Sample
240417-1n1mhagc61
-
MD5
f6a4b5eae090b0b2f60d81f8996d87a1
-
SHA1
878f35b314e5e3dc2de42b61a191748cc57e2414
-
SHA256
5d6bcdce1b0303397d00511cc64c6d2a26f94e5bef67990afa161575b7ea5038
-
SHA512
c4e3a9e311ff613c2668cbe65ac065e88999c17539630066dec9f748e1926e5632c13e5408fb8edbac6f7665b6994855706aad7c41c16799dbabc12a6ee44ab5
-
SSDEEP
24576:qu9eaOAfo5oV3aNJ6V5sniG+LVzJEqiF9PTRwl5Px:XfbV5sihVNheTQRx
Behavioral task
behavioral1
Sample
f6a4b5eae090b0b2f60d81f8996d87a1_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
danabot
4
192.119.110.73:443
192.236.147.159:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
f6a4b5eae090b0b2f60d81f8996d87a1_JaffaCakes118
-
Size
1.4MB
-
MD5
f6a4b5eae090b0b2f60d81f8996d87a1
-
SHA1
878f35b314e5e3dc2de42b61a191748cc57e2414
-
SHA256
5d6bcdce1b0303397d00511cc64c6d2a26f94e5bef67990afa161575b7ea5038
-
SHA512
c4e3a9e311ff613c2668cbe65ac065e88999c17539630066dec9f748e1926e5632c13e5408fb8edbac6f7665b6994855706aad7c41c16799dbabc12a6ee44ab5
-
SSDEEP
24576:qu9eaOAfo5oV3aNJ6V5sniG+LVzJEqiF9PTRwl5Px:XfbV5sihVNheTQRx
-
Danabot Loader Component
-
Blocklisted process makes network request
-