General
-
Target
d9f8f2a93e3e4a08e12a95410d2823ac_JaffaCakes118
-
Size
1.2MB
-
Sample
241209-rb2vcsvman
-
MD5
d9f8f2a93e3e4a08e12a95410d2823ac
-
SHA1
3224a3ac0afacaed0e1bdf961ce265def1c38927
-
SHA256
1f492469176d1d0bbf71de0503ac4788f7489b20e2f53f179c2826a0998038dc
-
SHA512
5fddf26879beb13b19bd353f3239c93b904372038f527f422697d3807ffbc9c64d551b8bc130d2dcbcc29f49b08d82eef89b66ff58c196be57500495acbc7ca2
-
SSDEEP
24576:8CxesLTH1zZ5SBuKo8lLKgiK5E+WDG6+cTyyF8sFv:bL5V4toTT+WDG6+cmyF
Static task
static1
Behavioral task
behavioral1
Sample
d9f8f2a93e3e4a08e12a95410d2823ac_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
danabot
4
142.11.244.124:443
142.11.206.50:443
-
embedded_hash
6AD9FE4F9E491E785665E0D144F61DAB
-
type
loader
Targets
-
-
Target
d9f8f2a93e3e4a08e12a95410d2823ac_JaffaCakes118
-
Size
1.2MB
-
MD5
d9f8f2a93e3e4a08e12a95410d2823ac
-
SHA1
3224a3ac0afacaed0e1bdf961ce265def1c38927
-
SHA256
1f492469176d1d0bbf71de0503ac4788f7489b20e2f53f179c2826a0998038dc
-
SHA512
5fddf26879beb13b19bd353f3239c93b904372038f527f422697d3807ffbc9c64d551b8bc130d2dcbcc29f49b08d82eef89b66ff58c196be57500495acbc7ca2
-
SSDEEP
24576:8CxesLTH1zZ5SBuKo8lLKgiK5E+WDG6+cTyyF8sFv:bL5V4toTT+WDG6+cmyF
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-
Loads dropped DLL
-