General
-
Target
JaffaCakes118_0b80b66459a9d4cbad76473e2f2fe6c3
-
Size
1.3MB
-
Sample
241231-jg1v9avkhz
-
MD5
0b80b66459a9d4cbad76473e2f2fe6c3
-
SHA1
3eb1f651c975d5ce9a9023ec040edc3792d9716a
-
SHA256
92fcf8a5096e83dea0dcb77251f22c06da713ad6082a22bd07ef1756e23ab924
-
SHA512
7333f72f6836f06fb62e77d39c3e4dc6edfce83c58730f8aa8376b05440dc47c5b758c99cd144f8c10000861570f6767c6ef9f01b59275e6c8dcff4fa8048ae7
-
SSDEEP
24576:GncFdh7rbCc1XupdscfiyWOrLYgt4LCpo+TJgag:lhe6xOTyP+T
Behavioral task
behavioral1
Sample
JaffaCakes118_0b80b66459a9d4cbad76473e2f2fe6c3.dll
Resource
win7-20241023-en
Malware Config
Extracted
danabot
4
192.119.110.73:443
192.236.147.159:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
JaffaCakes118_0b80b66459a9d4cbad76473e2f2fe6c3
-
Size
1.3MB
-
MD5
0b80b66459a9d4cbad76473e2f2fe6c3
-
SHA1
3eb1f651c975d5ce9a9023ec040edc3792d9716a
-
SHA256
92fcf8a5096e83dea0dcb77251f22c06da713ad6082a22bd07ef1756e23ab924
-
SHA512
7333f72f6836f06fb62e77d39c3e4dc6edfce83c58730f8aa8376b05440dc47c5b758c99cd144f8c10000861570f6767c6ef9f01b59275e6c8dcff4fa8048ae7
-
SSDEEP
24576:GncFdh7rbCc1XupdscfiyWOrLYgt4LCpo+TJgag:lhe6xOTyP+T
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-