General
-
Target
fdc145d46403a4ab4f3c271038e9b71a_JaffaCakes118
-
Size
1.3MB
-
Sample
240420-12c4csbb79
-
MD5
fdc145d46403a4ab4f3c271038e9b71a
-
SHA1
265116608b06a2926e54c76044a78493e81ba5dc
-
SHA256
40620ee4884dd5f585c7d8286bda375535af329154ec44e5826ac84e9716156e
-
SHA512
60f08391a725392538870559550118c5eea0b3b871052e0dae3b95e9f592e595a1c6b054b72def306ce6ea907dcb86ede04b7e6e0c0b4d356e085bc192c19ff2
-
SSDEEP
24576:lcF2L9dT0secg4cOeMDBj2Zsrm0Ty0zjPTzK:GyjFjMTe3Tu
Behavioral task
behavioral1
Sample
fdc145d46403a4ab4f3c271038e9b71a_JaffaCakes118.dll
Resource
win7-20240215-en
Malware Config
Extracted
danabot
4
142.11.242.31:443
192.119.110.73:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
fdc145d46403a4ab4f3c271038e9b71a_JaffaCakes118
-
Size
1.3MB
-
MD5
fdc145d46403a4ab4f3c271038e9b71a
-
SHA1
265116608b06a2926e54c76044a78493e81ba5dc
-
SHA256
40620ee4884dd5f585c7d8286bda375535af329154ec44e5826ac84e9716156e
-
SHA512
60f08391a725392538870559550118c5eea0b3b871052e0dae3b95e9f592e595a1c6b054b72def306ce6ea907dcb86ede04b7e6e0c0b4d356e085bc192c19ff2
-
SSDEEP
24576:lcF2L9dT0secg4cOeMDBj2Zsrm0Ty0zjPTzK:GyjFjMTe3Tu
-
Danabot Loader Component
-
Blocklisted process makes network request
-