General
-
Target
06ff18246a54deb88f0e4c6c840ef767_JaffaCakes118
-
Size
1.3MB
-
Sample
240620-r76s7axdqk
-
MD5
06ff18246a54deb88f0e4c6c840ef767
-
SHA1
47ced5a46996d57c4432eed7d62bb78f414e7928
-
SHA256
68aa505b783fd12d3bf65947cf66120f64960d858bdbfc40ba57a05bcf368b72
-
SHA512
81e0e1e609491f0090908644017b08b6d5e9028dae9f8525d5d18b938003146f51d3d78902995eae356e0c6b2f9149fcab420850d202d0c8ad671e7afe0d64a1
-
SSDEEP
24576:12BkyB+TBXQ5Z1uSGl7alYBYglTxW+LDih/zisa8MKBOweF:UkyB+FXQ5Z1uPl7aI1DA/zisijw
Behavioral task
behavioral1
Sample
06ff18246a54deb88f0e4c6c840ef767_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06ff18246a54deb88f0e4c6c840ef767_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
06ff18246a54deb88f0e4c6c840ef767_JaffaCakes118
-
Size
1.3MB
-
MD5
06ff18246a54deb88f0e4c6c840ef767
-
SHA1
47ced5a46996d57c4432eed7d62bb78f414e7928
-
SHA256
68aa505b783fd12d3bf65947cf66120f64960d858bdbfc40ba57a05bcf368b72
-
SHA512
81e0e1e609491f0090908644017b08b6d5e9028dae9f8525d5d18b938003146f51d3d78902995eae356e0c6b2f9149fcab420850d202d0c8ad671e7afe0d64a1
-
SSDEEP
24576:12BkyB+TBXQ5Z1uSGl7alYBYglTxW+LDih/zisa8MKBOweF:UkyB+FXQ5Z1uPl7aI1DA/zisijw
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-