General
-
Target
03428e1d5eab2e60eb8465545db5a48e_JaffaCakes118
-
Size
1.1MB
-
Sample
240930-zxaxrsverp
-
MD5
03428e1d5eab2e60eb8465545db5a48e
-
SHA1
6cc1a12e799e4e7251b3fa9e052dfc3ae954be43
-
SHA256
8ce823c7a2bd5e21c559c4bba91655079595b18ff77d52e105183d827d342637
-
SHA512
98441072dc02cfa8806d3ed56fb6a44a72fe8f841d4e558cc90a61456dc6a3bcc8151ab6a6a09f71e9ed7c65e0ee841eefc633bec6749e8210dd2b8228cc1b27
-
SSDEEP
24576:XCZmQFcWF4mumJedQJoih8UX6bYDhs1tHFCvFGZOHT09+gGIOTn3hVnkVa4Hi:fQFcatduiSGhs1tHFCvcZeTcgTRVn6i
Static task
static1
Behavioral task
behavioral1
Sample
03428e1d5eab2e60eb8465545db5a48e_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
danabot
4
142.11.192.232:443
192.119.110.73:443
142.11.242.31:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
03428e1d5eab2e60eb8465545db5a48e_JaffaCakes118
-
Size
1.1MB
-
MD5
03428e1d5eab2e60eb8465545db5a48e
-
SHA1
6cc1a12e799e4e7251b3fa9e052dfc3ae954be43
-
SHA256
8ce823c7a2bd5e21c559c4bba91655079595b18ff77d52e105183d827d342637
-
SHA512
98441072dc02cfa8806d3ed56fb6a44a72fe8f841d4e558cc90a61456dc6a3bcc8151ab6a6a09f71e9ed7c65e0ee841eefc633bec6749e8210dd2b8228cc1b27
-
SSDEEP
24576:XCZmQFcWF4mumJedQJoih8UX6bYDhs1tHFCvFGZOHT09+gGIOTn3hVnkVa4Hi:fQFcatduiSGhs1tHFCvcZeTcgTRVn6i
-
Danabot Loader Component
-
Blocklisted process makes network request
-
Loads dropped DLL
-