General
-
Target
JaffaCakes118_20f464fcc549e5cb353a63bac9b95c9d
-
Size
1.2MB
-
Sample
241231-rjfbbstngx
-
MD5
20f464fcc549e5cb353a63bac9b95c9d
-
SHA1
08d48ac38821b51778e2a58b7cc08bfb031ce46b
-
SHA256
271d802b758948fab12a61c970b381b7da832ef4125acc82a43fd6d4303e4a81
-
SHA512
87fbc83dc1ece1efc1fae9ccb07d0e852692a277e2571218e7f321a9e3e6056f0af8f37e6ab57b4dd942ef1532aa5443ef7f1d9316a365080eaaf21a6ef47b02
-
SSDEEP
24576:eOofvRmchQsHOHxrF6FcDXVGgX5YBdzws/cx7IumJU8pP7eS9zCLih6VLoOgM:XaRThQQOHxJ4cZG9BdzwSMfmPd
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_20f464fcc549e5cb353a63bac9b95c9d.exe
Resource
win7-20241010-en
Malware Config
Extracted
danabot
4
192.119.110.73:443
192.236.147.159:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
JaffaCakes118_20f464fcc549e5cb353a63bac9b95c9d
-
Size
1.2MB
-
MD5
20f464fcc549e5cb353a63bac9b95c9d
-
SHA1
08d48ac38821b51778e2a58b7cc08bfb031ce46b
-
SHA256
271d802b758948fab12a61c970b381b7da832ef4125acc82a43fd6d4303e4a81
-
SHA512
87fbc83dc1ece1efc1fae9ccb07d0e852692a277e2571218e7f321a9e3e6056f0af8f37e6ab57b4dd942ef1532aa5443ef7f1d9316a365080eaaf21a6ef47b02
-
SSDEEP
24576:eOofvRmchQsHOHxrF6FcDXVGgX5YBdzws/cx7IumJU8pP7eS9zCLih6VLoOgM:XaRThQQOHxJ4cZG9BdzwSMfmPd
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-
Loads dropped DLL
-