General
-
Target
JaffaCakes118_f3cf56933495454922507cc431f460d0
-
Size
1.3MB
-
Sample
250111-b8pnasxqaw
-
MD5
f3cf56933495454922507cc431f460d0
-
SHA1
8e2dc649e40a3cc66a9003dfc372299704ae4f34
-
SHA256
097f19e3a81d69cb383a4d512b8e4c7b5b8764d087c8a286cd2bf162cbc23ec8
-
SHA512
28d0b8d7d5c8eba3be40c6344f22d66f8c40eb4419ab61542399ce59e3a18937396c0ac5c8c7ad36c4da878e43bc3466259b7852c36bb853d952c4ad45f3b2a6
-
SSDEEP
24576:dncFdAiAtFv3+x13TRnNeH60X+JN4m+TyTk0:KALGEzLGTL
Behavioral task
behavioral1
Sample
JaffaCakes118_f3cf56933495454922507cc431f460d0.dll
Resource
win7-20241010-en
Malware Config
Extracted
danabot
4
142.11.192.232:443
192.119.110.73:443
142.11.242.31:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
JaffaCakes118_f3cf56933495454922507cc431f460d0
-
Size
1.3MB
-
MD5
f3cf56933495454922507cc431f460d0
-
SHA1
8e2dc649e40a3cc66a9003dfc372299704ae4f34
-
SHA256
097f19e3a81d69cb383a4d512b8e4c7b5b8764d087c8a286cd2bf162cbc23ec8
-
SHA512
28d0b8d7d5c8eba3be40c6344f22d66f8c40eb4419ab61542399ce59e3a18937396c0ac5c8c7ad36c4da878e43bc3466259b7852c36bb853d952c4ad45f3b2a6
-
SSDEEP
24576:dncFdAiAtFv3+x13TRnNeH60X+JN4m+TyTk0:KALGEzLGTL
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-