General
-
Target
009d9a1d33294da362f3e8a58c321fa4_JaffaCakes118
-
Size
406KB
-
Sample
240619-1ev1naxbpl
-
MD5
009d9a1d33294da362f3e8a58c321fa4
-
SHA1
06c3bb9eee44e5ed8997134625e18b21206729d6
-
SHA256
80e7ace75ef379afb6d957688242c1d442adc4daeadaffe132b9137ceda00780
-
SHA512
6fac1b3fb6faa6294e16270331d53b2b8ba90e16e353a6ec6b1811027a95f1b9079daa23e6d8b956dd7c5f3611ceb3ffbdb37426bcacedf5f4cbdd7f55bcc8f0
-
SSDEEP
12288:/uPndqnMOZuMSfuxwwCjljjlXAgACmNjn:t5oMSKwrXlwgAC8jn
Behavioral task
behavioral1
Sample
MyLink/MyLink.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
MyLink/MyLink.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
MyLink/MyLink.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
MyLink/MyLink.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
MyLink/MyLink.dll
-
Size
404KB
-
MD5
8a64a5a185ba4c5a40640467dc839f68
-
SHA1
47c3c088a3d2b31330a26b38956787982082bd73
-
SHA256
29645650fa2050b364405e787b94fb24d943558eb5eebf3a15c5f336c19f4c70
-
SHA512
188e492a8fc1a608e5bc321100c3fc5fe4ab60df7f68f71f5b5438996e4aeabb833033abff8e9523aa12e0cdc2d05ee122f9fb65922ddd2e13454ed4413738a4
-
SSDEEP
12288:tWAQoGCxqeu/JmO1Hg6nVfLoD83LlSC1Gdw:t9QoGIqRVgg1j3Jp
Score3/10 -
-
-
Target
MyLink/MyLink.exe
-
Size
231KB
-
MD5
c34b3901859b5c6199bcdc491eaca1f0
-
SHA1
19c137ea37fb7a9dce9a40eca7e949684ceb57ce
-
SHA256
da4968f99d973c41ace39ed70dcc3c39686dc99c5fdf970df953eebd37347a9b
-
SHA512
9718c0dc517d93a2b276630919d70b89c44e5b3d7fbc347a49c8384a2e7f08b02b332d21723ff9ffe4457951e0d855de03b5b01bc350ab00ca763bd478572df6
-
SSDEEP
6144:jLFPEhHWgA5AMkXLD4rZVa0bZMSv7L1pK7Mc:jLFchHWgcAMkXLD4dY0bKSTLygc
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage
-
Adds Run key to start application
-