General
-
Target
8e569bc871b8364669e122b63dda8399_JaffaCakes118
-
Size
1.2MB
-
Sample
240812-l9akwa1akd
-
MD5
8e569bc871b8364669e122b63dda8399
-
SHA1
69dfd12c7df066389d1cf48ee17619ce03289263
-
SHA256
5f67a9e1b25d56cf1e7ba857b2cfc4be77db1e92ea8a32ee154e9322d96387f7
-
SHA512
21782398dcfdcaa15d1e61874b6811907876066f45d77cb563d86db9c692b1435c4956fc92b89bd47a29b31162ee8f4ee9df7492360b158a7a7ae1ae2fbfbb1e
-
SSDEEP
24576:Qr0NQtHQ+I8JqdGmbTXgpDDhJ8BD1gNZNZANDuRrPNiKQ//j36L:QYNQtHQ+idGmbTXgpHhJ8BD1UvANDorN
Static task
static1
Behavioral task
behavioral1
Sample
8e569bc871b8364669e122b63dda8399_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Extracted
danabot
4
142.11.242.31:443
192.119.110.73:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
8e569bc871b8364669e122b63dda8399_JaffaCakes118
-
Size
1.2MB
-
MD5
8e569bc871b8364669e122b63dda8399
-
SHA1
69dfd12c7df066389d1cf48ee17619ce03289263
-
SHA256
5f67a9e1b25d56cf1e7ba857b2cfc4be77db1e92ea8a32ee154e9322d96387f7
-
SHA512
21782398dcfdcaa15d1e61874b6811907876066f45d77cb563d86db9c692b1435c4956fc92b89bd47a29b31162ee8f4ee9df7492360b158a7a7ae1ae2fbfbb1e
-
SSDEEP
24576:Qr0NQtHQ+I8JqdGmbTXgpDDhJ8BD1gNZNZANDuRrPNiKQ//j36L:QYNQtHQ+idGmbTXgpHhJ8BD1UvANDorN
-
Danabot Loader Component
-
Blocklisted process makes network request
-
Loads dropped DLL
-