General
-
Target
a8f379d1ad1793447317b8e5795ebbb9_JaffaCakes118
-
Size
1.1MB
-
Sample
241127-v8zcaatkbv
-
MD5
a8f379d1ad1793447317b8e5795ebbb9
-
SHA1
1b17c665fa91d9944877c372f767fa53a9a3ba26
-
SHA256
4c59c855f86efd8446e30eb4945de7e14902e3497ffbc69c7f9b957083a0539a
-
SHA512
0a8c471e5d04319a1d7d483cd4575a9c4bc1d1257d4459d132368b4f328afeb4c58aed43ed3b36ae3d1eb847ae66327c98d906834b30a4ceb1f8a54acd68a7fe
-
SSDEEP
24576:IImlpb6g2Nl3cOG0JgbCCmOGM3nBxmKd9e61YlaMf4dIxi:RspblMsugbi2xPd92n8A
Static task
static1
Behavioral task
behavioral1
Sample
a8f379d1ad1793447317b8e5795ebbb9_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
danabot
4
142.11.244.124:443
142.11.206.50:443
-
embedded_hash
6AD9FE4F9E491E785665E0D144F61DAB
-
type
loader
Targets
-
-
Target
a8f379d1ad1793447317b8e5795ebbb9_JaffaCakes118
-
Size
1.1MB
-
MD5
a8f379d1ad1793447317b8e5795ebbb9
-
SHA1
1b17c665fa91d9944877c372f767fa53a9a3ba26
-
SHA256
4c59c855f86efd8446e30eb4945de7e14902e3497ffbc69c7f9b957083a0539a
-
SHA512
0a8c471e5d04319a1d7d483cd4575a9c4bc1d1257d4459d132368b4f328afeb4c58aed43ed3b36ae3d1eb847ae66327c98d906834b30a4ceb1f8a54acd68a7fe
-
SSDEEP
24576:IImlpb6g2Nl3cOG0JgbCCmOGM3nBxmKd9e61YlaMf4dIxi:RspblMsugbi2xPd92n8A
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-
Loads dropped DLL
-