General
-
Target
JaffaCakes118_ad3b90c1d0de44c34616ee5f2c048992a92c2d87f604ff7789fc04af436ae654
-
Size
1.3MB
-
Sample
241222-dh9lws1men
-
MD5
3e540a594ce77690013e09fe0c3256de
-
SHA1
40bb53bdff2c64aec1283e6e0c29b5c883bbdf55
-
SHA256
ad3b90c1d0de44c34616ee5f2c048992a92c2d87f604ff7789fc04af436ae654
-
SHA512
d0754b33d7794ef29b7675389a4ddcb48f510ea9ac70fb92fa3a9524223b9646d3a5a4a1017279a7a53715deb368598011e2d9854fa143799b0bce0e8fa0996b
-
SSDEEP
24576:+K3Zae4BNdOHrLw6fmzRgCXSLlDSO6Dmrhwp3dd14dD3eatZJqRFETDh1q:+K3Zt4kHY6kSL1SpEhwpDOttXqHG11
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_ad3b90c1d0de44c34616ee5f2c048992a92c2d87f604ff7789fc04af436ae654.exe
Resource
win7-20240903-en
Malware Config
Extracted
danabot
192.236.233.188:443
192.119.70.159:443
23.106.124.171:443
213.227.155.103:443
-
embedded_hash
56951C922035D696BFCE443750496462
-
type
loader
Targets
-
-
Target
JaffaCakes118_ad3b90c1d0de44c34616ee5f2c048992a92c2d87f604ff7789fc04af436ae654
-
Size
1.3MB
-
MD5
3e540a594ce77690013e09fe0c3256de
-
SHA1
40bb53bdff2c64aec1283e6e0c29b5c883bbdf55
-
SHA256
ad3b90c1d0de44c34616ee5f2c048992a92c2d87f604ff7789fc04af436ae654
-
SHA512
d0754b33d7794ef29b7675389a4ddcb48f510ea9ac70fb92fa3a9524223b9646d3a5a4a1017279a7a53715deb368598011e2d9854fa143799b0bce0e8fa0996b
-
SSDEEP
24576:+K3Zae4BNdOHrLw6fmzRgCXSLlDSO6Dmrhwp3dd14dD3eatZJqRFETDh1q:+K3Zt4kHY6kSL1SpEhwpDOttXqHG11
-
Danabot family
-
Blocklisted process makes network request
-