General
-
Target
JaffaCakes118_fcaf9e6ee324d9d70f61e1bd8d137685
-
Size
1.3MB
-
Sample
250111-kvgvzatmat
-
MD5
fcaf9e6ee324d9d70f61e1bd8d137685
-
SHA1
89823c6bc2dcac5f0bd468c940c2ca2025801956
-
SHA256
4f10e3eb59c91d91a18bbb2ecd288e52c89633b211365f05d90fccb00f59c047
-
SHA512
1b1073049704b9ac1fffbb69773d4e6bbff127f6b42299e9317ebb6246a5f93789a96759249ea9150675e9233e433b87da8a3cae1548861cb7db1b19636e3b35
-
SSDEEP
24576:58FG/L98qXKTVfl8B0Y1ewAfj3xCV2D3qyzFTrQB79t:a7VSNAfj3xCoayzFT0j
Behavioral task
behavioral1
Sample
JaffaCakes118_fcaf9e6ee324d9d70f61e1bd8d137685.dll
Resource
win7-20240729-en
Malware Config
Extracted
danabot
4
192.119.110.73:443
192.236.147.159:443
192.210.222.88:443
-
embedded_hash
F4711E27D559B4AEB1A081A1EB0AC465
-
type
loader
Targets
-
-
Target
JaffaCakes118_fcaf9e6ee324d9d70f61e1bd8d137685
-
Size
1.3MB
-
MD5
fcaf9e6ee324d9d70f61e1bd8d137685
-
SHA1
89823c6bc2dcac5f0bd468c940c2ca2025801956
-
SHA256
4f10e3eb59c91d91a18bbb2ecd288e52c89633b211365f05d90fccb00f59c047
-
SHA512
1b1073049704b9ac1fffbb69773d4e6bbff127f6b42299e9317ebb6246a5f93789a96759249ea9150675e9233e433b87da8a3cae1548861cb7db1b19636e3b35
-
SSDEEP
24576:58FG/L98qXKTVfl8B0Y1ewAfj3xCV2D3qyzFTrQB79t:a7VSNAfj3xCoayzFT0j
-
Danabot Loader Component
-
Danabot family
-
Blocklisted process makes network request
-