General
-
Target
a3562a23601befa59bce8f31fe4cd029_JaffaCakes118
-
Size
1.3MB
-
Sample
241126-wktmkaymem
-
MD5
a3562a23601befa59bce8f31fe4cd029
-
SHA1
3f892736c9abdbcf6d4f79ec01b9e88754fafb3b
-
SHA256
2b679d07e8f2bff8fa6ee739746dd8868567398e5f80634aa47fed76b924ba12
-
SHA512
119717f31b0a5f8ec5f4165cb5e4b2dcaae7a1e8ecf92e0545c47c26f02ecd44fdcc8120ddd8b437cdc45dcb72731359faad8e5f96f943ee5057edfc2d321ba5
-
SSDEEP
24576:p8pWEmmpAhVFcFi5iPqz5167D3vTtEH+:qk7No7D3vTaH
Behavioral task
behavioral1
Sample
a3562a23601befa59bce8f31fe4cd029_JaffaCakes118.dll
Resource
win7-20240903-en
Malware Config
Extracted
danabot
4
142.11.192.232:443
142.11.242.31:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
a3562a23601befa59bce8f31fe4cd029_JaffaCakes118
-
Size
1.3MB
-
MD5
a3562a23601befa59bce8f31fe4cd029
-
SHA1
3f892736c9abdbcf6d4f79ec01b9e88754fafb3b
-
SHA256
2b679d07e8f2bff8fa6ee739746dd8868567398e5f80634aa47fed76b924ba12
-
SHA512
119717f31b0a5f8ec5f4165cb5e4b2dcaae7a1e8ecf92e0545c47c26f02ecd44fdcc8120ddd8b437cdc45dcb72731359faad8e5f96f943ee5057edfc2d321ba5
-
SSDEEP
24576:p8pWEmmpAhVFcFi5iPqz5167D3vTtEH+:qk7No7D3vTaH
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-