General
-
Target
953dd96c040107d9f2f530fdd016fdae_JaffaCakes118
-
Size
1.2MB
-
Sample
241124-rqptcazmdm
-
MD5
953dd96c040107d9f2f530fdd016fdae
-
SHA1
af9401b6399744f98f1e9fa438553c51ef9068a6
-
SHA256
2b88445b22f246b0fa92c00163a8d35f2dfb416bbbd80cbdf99a28be7d775ae0
-
SHA512
878df0c60c01005548facacba455dc11d60cb204a5480119c857e0e32ffdfea7be7e305ee98d00e5fb7f76510852e3f44d37590fcec97d58d7db73bda29e4073
-
SSDEEP
24576:WQoE+18Ba1A+DTyScWhfyJqiOATy07GnjWT7+n:3at1A+DGFWk8+y07s3
Static task
static1
Behavioral task
behavioral1
Sample
953dd96c040107d9f2f530fdd016fdae_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
danabot
4
142.11.244.124:443
142.11.206.50:443
-
embedded_hash
6AD9FE4F9E491E785665E0D144F61DAB
-
type
loader
Targets
-
-
Target
953dd96c040107d9f2f530fdd016fdae_JaffaCakes118
-
Size
1.2MB
-
MD5
953dd96c040107d9f2f530fdd016fdae
-
SHA1
af9401b6399744f98f1e9fa438553c51ef9068a6
-
SHA256
2b88445b22f246b0fa92c00163a8d35f2dfb416bbbd80cbdf99a28be7d775ae0
-
SHA512
878df0c60c01005548facacba455dc11d60cb204a5480119c857e0e32ffdfea7be7e305ee98d00e5fb7f76510852e3f44d37590fcec97d58d7db73bda29e4073
-
SSDEEP
24576:WQoE+18Ba1A+DTyScWhfyJqiOATy07GnjWT7+n:3at1A+DGFWk8+y07s3
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-
Loads dropped DLL
-