General
-
Target
d246aecf2b465f3ae7ee29440e0da998_JaffaCakes118
-
Size
1.3MB
-
Sample
240907-s4tvws1clp
-
MD5
d246aecf2b465f3ae7ee29440e0da998
-
SHA1
d06e4fc8b5c66b1cd9ab75c715ba5310c8188188
-
SHA256
dc010c43d694897f901cd600b90531c2c5019b0ed2d63600ed7196eaeba7f996
-
SHA512
eb7955bc0175a53fa6a3a47a45ed8615b31763e5f9fa6fe71f1e2b8912194bbc921b7c601dd843d8f8db6ffefeafe2ad04509d9161ef404fc11972cb24575b73
-
SSDEEP
24576:EncFdn7rbCc1XupdscfiyWj16Y2dZ5+dxjw2oXT1h:bne6x56xG0PT
Behavioral task
behavioral1
Sample
d246aecf2b465f3ae7ee29440e0da998_JaffaCakes118.dll
Resource
win7-20240903-en
Malware Config
Extracted
danabot
4
23.254.144.209:443
192.236.194.86:443
142.11.192.232:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
d246aecf2b465f3ae7ee29440e0da998_JaffaCakes118
-
Size
1.3MB
-
MD5
d246aecf2b465f3ae7ee29440e0da998
-
SHA1
d06e4fc8b5c66b1cd9ab75c715ba5310c8188188
-
SHA256
dc010c43d694897f901cd600b90531c2c5019b0ed2d63600ed7196eaeba7f996
-
SHA512
eb7955bc0175a53fa6a3a47a45ed8615b31763e5f9fa6fe71f1e2b8912194bbc921b7c601dd843d8f8db6ffefeafe2ad04509d9161ef404fc11972cb24575b73
-
SSDEEP
24576:EncFdn7rbCc1XupdscfiyWj16Y2dZ5+dxjw2oXT1h:bne6x56xG0PT
-
Danabot Loader Component
-
Blocklisted process makes network request
-