General
-
Target
008a6a0161dcb313f73fd094808c7e87_JaffaCakes118
-
Size
1.1MB
-
Sample
240619-z5s4basaqe
-
MD5
008a6a0161dcb313f73fd094808c7e87
-
SHA1
f4618b713fb0b1cafde89bbcfb5560e4697775b9
-
SHA256
04782141431a47986c14700b864761952f0b46581f4f39b826410782d4103c06
-
SHA512
b0fad4acf332d34b4380c9cb5ecf3b3ed35115c965d4070bb0fa95748b1f16e588b2778f4f144df10b70222c54522bd4ad97f8633b877b097abf3852ae36eb7b
-
SSDEEP
24576:GDzf5fzhCMEnX2X4UkunZDsN9f3DhGOteqNq:GD75Lh99nkunZqbNq
Behavioral task
behavioral1
Sample
008a6a0161dcb313f73fd094808c7e87_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
008a6a0161dcb313f73fd094808c7e87_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
008a6a0161dcb313f73fd094808c7e87_JaffaCakes118
-
Size
1.1MB
-
MD5
008a6a0161dcb313f73fd094808c7e87
-
SHA1
f4618b713fb0b1cafde89bbcfb5560e4697775b9
-
SHA256
04782141431a47986c14700b864761952f0b46581f4f39b826410782d4103c06
-
SHA512
b0fad4acf332d34b4380c9cb5ecf3b3ed35115c965d4070bb0fa95748b1f16e588b2778f4f144df10b70222c54522bd4ad97f8633b877b097abf3852ae36eb7b
-
SSDEEP
24576:GDzf5fzhCMEnX2X4UkunZDsN9f3DhGOteqNq:GD75Lh99nkunZqbNq
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1