General
-
Target
e7155a044e78d7d8fac3258064e0f75f_JaffaCakes118
-
Size
1.4MB
-
Sample
240408-ksgr7adc65
-
MD5
e7155a044e78d7d8fac3258064e0f75f
-
SHA1
ceb02d4c204a7400698fe407f1eb7ddf0cc36f9a
-
SHA256
57d104e6c56105828c9804add882b3e8cd2aa6024d2ab44d8c0f2ad2c9b4284a
-
SHA512
bca532d74156d0fdfe8bd3a9a0009228711db7665c5de61e4251d4ce24aa47bc1f137a63908590c59e08d078ef55b10ebae879bb8182adc6be00ea05e9f7cb8c
-
SSDEEP
24576:CniPTv5MywAft4pJVkAmg1r6JsYW/oySTMsjMHK0lS67sg+NELvbMss:a65lDeVB710T50lRsgIs
Static task
static1
Behavioral task
behavioral1
Sample
e7155a044e78d7d8fac3258064e0f75f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7155a044e78d7d8fac3258064e0f75f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e7155a044e78d7d8fac3258064e0f75f_JaffaCakes118
-
Size
1.4MB
-
MD5
e7155a044e78d7d8fac3258064e0f75f
-
SHA1
ceb02d4c204a7400698fe407f1eb7ddf0cc36f9a
-
SHA256
57d104e6c56105828c9804add882b3e8cd2aa6024d2ab44d8c0f2ad2c9b4284a
-
SHA512
bca532d74156d0fdfe8bd3a9a0009228711db7665c5de61e4251d4ce24aa47bc1f137a63908590c59e08d078ef55b10ebae879bb8182adc6be00ea05e9f7cb8c
-
SSDEEP
24576:CniPTv5MywAft4pJVkAmg1r6JsYW/oySTMsjMHK0lS67sg+NELvbMss:a65lDeVB710T50lRsgIs
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-