General
-
Target
JaffaCakes118_ca869ed3ed50991b6e2caa5857cfc8e3
-
Size
1.3MB
-
Sample
250109-rsp7wssjfs
-
MD5
ca869ed3ed50991b6e2caa5857cfc8e3
-
SHA1
ff57484f40ac588af48e05c3ab9018a819f6624a
-
SHA256
05f759d098942be6c9bc736099be7ca54cf1667afbe1113d95bee2a23e33ba5c
-
SHA512
202e86b1bbe5fae75e39abfb319e79d7cb89e094aea7fc244531d9200e16bd27920e7143b59e87f379d5507162b0381ef86e377d246fb264002c3e33866191bc
-
SSDEEP
24576:KncFdxcZ3Mn9C2vOte0kS+RB39lTlotGT9uy6:BT2FBY9ljTIy6
Behavioral task
behavioral1
Sample
JaffaCakes118_ca869ed3ed50991b6e2caa5857cfc8e3.dll
Resource
win7-20240903-en
Malware Config
Extracted
danabot
4
142.11.242.31:443
192.119.110.73:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
JaffaCakes118_ca869ed3ed50991b6e2caa5857cfc8e3
-
Size
1.3MB
-
MD5
ca869ed3ed50991b6e2caa5857cfc8e3
-
SHA1
ff57484f40ac588af48e05c3ab9018a819f6624a
-
SHA256
05f759d098942be6c9bc736099be7ca54cf1667afbe1113d95bee2a23e33ba5c
-
SHA512
202e86b1bbe5fae75e39abfb319e79d7cb89e094aea7fc244531d9200e16bd27920e7143b59e87f379d5507162b0381ef86e377d246fb264002c3e33866191bc
-
SSDEEP
24576:KncFdxcZ3Mn9C2vOte0kS+RB39lTlotGT9uy6:BT2FBY9ljTIy6
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-