General
-
Target
9a505d2be9d9d8efa97018f0bebe5660_JaffaCakes118
-
Size
1.2MB
-
Sample
241125-j9t86stmcj
-
MD5
9a505d2be9d9d8efa97018f0bebe5660
-
SHA1
549be56cb07367345b5d1a8c24cf12a3117e9bb0
-
SHA256
02a931bd8d90478e89631fca772c3592ed2f12bb50baf4c5f989e512b80961f5
-
SHA512
8bf807daad544ad63d5739243765d18e49fe04704fba9f6a82a200bde65899db0e3854cae8efdfac015824fac514f48567138b1cfb7c973c56386c3169994eeb
-
SSDEEP
24576:SHtd+xuw3WhBvcCTVaYIEkcFiLOYeDZazGmvaNRzH2e:M63KBECBBgOYwZHgCRzH
Static task
static1
Behavioral task
behavioral1
Sample
9a505d2be9d9d8efa97018f0bebe5660_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
danabot
4
142.11.244.124:443
142.11.206.50:443
-
embedded_hash
6AD9FE4F9E491E785665E0D144F61DAB
-
type
loader
Targets
-
-
Target
9a505d2be9d9d8efa97018f0bebe5660_JaffaCakes118
-
Size
1.2MB
-
MD5
9a505d2be9d9d8efa97018f0bebe5660
-
SHA1
549be56cb07367345b5d1a8c24cf12a3117e9bb0
-
SHA256
02a931bd8d90478e89631fca772c3592ed2f12bb50baf4c5f989e512b80961f5
-
SHA512
8bf807daad544ad63d5739243765d18e49fe04704fba9f6a82a200bde65899db0e3854cae8efdfac015824fac514f48567138b1cfb7c973c56386c3169994eeb
-
SSDEEP
24576:SHtd+xuw3WhBvcCTVaYIEkcFiLOYeDZazGmvaNRzH2e:M63KBECBBgOYwZHgCRzH
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-
Loads dropped DLL
-