General
-
Target
bff3c1180f3b072eefcd156b258ddba9_JaffaCakes118
-
Size
1.1MB
-
Sample
241204-arcfzaskds
-
MD5
bff3c1180f3b072eefcd156b258ddba9
-
SHA1
62a3d746e7da0533ca416040127616af01386047
-
SHA256
a8680038c75e6993676a00c71a848abdd7def427d731ee7d46f9c583c37f6c2a
-
SHA512
16d24195a8a6f048c4ef552c23b2c9d3da85e78e1f11de67f7d15b7e8d3002bb2fbbe51221c4399f822427faff43cd96c70efe944a36a08242e226b625f83ab1
-
SSDEEP
24576:tXePyTfd/+EKB314iIbYYrO5UwZQtLIkVpAPXygaiJudKqCQK:TTM31f2Y7XkXAPigLA9BK
Static task
static1
Behavioral task
behavioral1
Sample
bff3c1180f3b072eefcd156b258ddba9_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
danabot
4
193.34.167.138:443
152.89.247.31:443
142.11.206.50:443
-
embedded_hash
6AD9FE4F9E491E785665E0D144F61DAB
-
type
loader
Targets
-
-
Target
bff3c1180f3b072eefcd156b258ddba9_JaffaCakes118
-
Size
1.1MB
-
MD5
bff3c1180f3b072eefcd156b258ddba9
-
SHA1
62a3d746e7da0533ca416040127616af01386047
-
SHA256
a8680038c75e6993676a00c71a848abdd7def427d731ee7d46f9c583c37f6c2a
-
SHA512
16d24195a8a6f048c4ef552c23b2c9d3da85e78e1f11de67f7d15b7e8d3002bb2fbbe51221c4399f822427faff43cd96c70efe944a36a08242e226b625f83ab1
-
SSDEEP
24576:tXePyTfd/+EKB314iIbYYrO5UwZQtLIkVpAPXygaiJudKqCQK:TTM31f2Y7XkXAPigLA9BK
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-
Loads dropped DLL
-