General
-
Target
c07f8b98e61d202f586fe4cf3b8b6aab_JaffaCakes118
-
Size
1.1MB
-
Sample
241204-dgw96syket
-
MD5
c07f8b98e61d202f586fe4cf3b8b6aab
-
SHA1
7798520b8e329d29652878dbacf54eab780adde9
-
SHA256
dc8ecedc327784cd97120e221c7d85cad5ce6447ab181af99e71426117a5ea50
-
SHA512
51b138c0b7f29a0fd2191d23da0e1c60fc1b4ba5c81d300b4ab12d7bfe5eca77fe253cb81213adf2f227ab852ee9afbf50e626c9a74a1d3671e4fd4f08951004
-
SSDEEP
24576:u8AYfVlQ4LbKu2OtVv0HruNV+bVLQa98L8XtAGDIvGb69A:u8Jfkru3nvCQwQa9dXtNUv
Static task
static1
Behavioral task
behavioral1
Sample
c07f8b98e61d202f586fe4cf3b8b6aab_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
danabot
4
142.11.244.124:443
142.11.206.50:443
-
embedded_hash
6AD9FE4F9E491E785665E0D144F61DAB
-
type
loader
Targets
-
-
Target
c07f8b98e61d202f586fe4cf3b8b6aab_JaffaCakes118
-
Size
1.1MB
-
MD5
c07f8b98e61d202f586fe4cf3b8b6aab
-
SHA1
7798520b8e329d29652878dbacf54eab780adde9
-
SHA256
dc8ecedc327784cd97120e221c7d85cad5ce6447ab181af99e71426117a5ea50
-
SHA512
51b138c0b7f29a0fd2191d23da0e1c60fc1b4ba5c81d300b4ab12d7bfe5eca77fe253cb81213adf2f227ab852ee9afbf50e626c9a74a1d3671e4fd4f08951004
-
SSDEEP
24576:u8AYfVlQ4LbKu2OtVv0HruNV+bVLQa98L8XtAGDIvGb69A:u8Jfkru3nvCQwQa9dXtNUv
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-
Loads dropped DLL
-