General
-
Target
06ff22b3aaffeec270db7b0eeb99d8cd_JaffaCakes118
-
Size
689KB
-
Sample
240620-r77eqaxdqm
-
MD5
06ff22b3aaffeec270db7b0eeb99d8cd
-
SHA1
2c584635840b1204da8e0d08a0c910f6e6d6fdb9
-
SHA256
fb1ae66451ebd70ec9156624e4a7ca7c553f7a78b8cfce91800c7049df02fb7b
-
SHA512
d090a774eaf8ece8061afebf92cd3bc4ebf5ce3476892047a1c26ca3e357043d73ea0b83abdc5d2757e79011a96a7f0751bbc4b5a0ec14c8effc777ee57bea86
-
SSDEEP
12288:ZrsCtGgoza+59aO0dp9UWQVgiebkA4qZb5qv5NdTgx/ST3kx:N12OCstUWI2aqTcPu1ST3
Behavioral task
behavioral1
Sample
06ff22b3aaffeec270db7b0eeb99d8cd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06ff22b3aaffeec270db7b0eeb99d8cd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
06ff22b3aaffeec270db7b0eeb99d8cd_JaffaCakes118
-
Size
689KB
-
MD5
06ff22b3aaffeec270db7b0eeb99d8cd
-
SHA1
2c584635840b1204da8e0d08a0c910f6e6d6fdb9
-
SHA256
fb1ae66451ebd70ec9156624e4a7ca7c553f7a78b8cfce91800c7049df02fb7b
-
SHA512
d090a774eaf8ece8061afebf92cd3bc4ebf5ce3476892047a1c26ca3e357043d73ea0b83abdc5d2757e79011a96a7f0751bbc4b5a0ec14c8effc777ee57bea86
-
SSDEEP
12288:ZrsCtGgoza+59aO0dp9UWQVgiebkA4qZb5qv5NdTgx/ST3kx:N12OCstUWI2aqTcPu1ST3
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-