General
-
Target
b1c946949dfb8f94b932dd6845372bd7_JaffaCakes118
-
Size
1.3MB
-
Sample
241129-rmbgjsvjak
-
MD5
b1c946949dfb8f94b932dd6845372bd7
-
SHA1
45356dec193fb229986af8e0f8ee27efddc77b7d
-
SHA256
50f11eaf16fc22d5c0df0a438db246e5bcd1c1b13e2c286829611a4acd228a33
-
SHA512
0bb1916f27523e4aa4a83d454b5d82b10b5768b8fe86dec73918a07ddfd34a9aeb111b52935a8453ce83085f5f3a930f5a9ad84847f0b324b767a92f90999663
-
SSDEEP
24576:G8pWEme3GIQUpr59PIuS8Fx8PpVi2mKYcJHLGTvT1y:dNT8PjjZJ+vT
Behavioral task
behavioral1
Sample
b1c946949dfb8f94b932dd6845372bd7_JaffaCakes118.dll
Resource
win7-20240708-en
Malware Config
Extracted
danabot
4
23.229.29.48:443
-
embedded_hash
0E1A7A1479C37094441FA911262B322A
-
type
loader
Targets
-
-
Target
b1c946949dfb8f94b932dd6845372bd7_JaffaCakes118
-
Size
1.3MB
-
MD5
b1c946949dfb8f94b932dd6845372bd7
-
SHA1
45356dec193fb229986af8e0f8ee27efddc77b7d
-
SHA256
50f11eaf16fc22d5c0df0a438db246e5bcd1c1b13e2c286829611a4acd228a33
-
SHA512
0bb1916f27523e4aa4a83d454b5d82b10b5768b8fe86dec73918a07ddfd34a9aeb111b52935a8453ce83085f5f3a930f5a9ad84847f0b324b767a92f90999663
-
SSDEEP
24576:G8pWEme3GIQUpr59PIuS8Fx8PpVi2mKYcJHLGTvT1y:dNT8PjjZJ+vT
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-