General
-
Target
0788b1fdfc19097b57df85013eb68413_JaffaCakes118
-
Size
61KB
-
Sample
240620-tf3nkazfjp
-
MD5
0788b1fdfc19097b57df85013eb68413
-
SHA1
8bb1217f6bc496e5f1acc2edd5aa8c07eac0fe9d
-
SHA256
b2d5820b2d985b0c27b2a88545ff5b6c3fd8e3f5878c6456e20385921f0c9b79
-
SHA512
9c9335adbc973b0533688fec087f7dcc4f73afb9fb9993ec48666280e650525cacc4ea26ea748f8c8156a708b3a144f815b4a1cd5f7c690cc0e513ceaf56fe05
-
SSDEEP
1536:Om7wjsVTJ+p3JrkGLawHE/E2j+ENmYJgU9BNtVhX4hFISo:p+sVT45mn/bjnNqU9B5ZQFISo
Static task
static1
Behavioral task
behavioral1
Sample
0788b1fdfc19097b57df85013eb68413_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0788b1fdfc19097b57df85013eb68413_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0788b1fdfc19097b57df85013eb68413_JaffaCakes118
-
Size
61KB
-
MD5
0788b1fdfc19097b57df85013eb68413
-
SHA1
8bb1217f6bc496e5f1acc2edd5aa8c07eac0fe9d
-
SHA256
b2d5820b2d985b0c27b2a88545ff5b6c3fd8e3f5878c6456e20385921f0c9b79
-
SHA512
9c9335adbc973b0533688fec087f7dcc4f73afb9fb9993ec48666280e650525cacc4ea26ea748f8c8156a708b3a144f815b4a1cd5f7c690cc0e513ceaf56fe05
-
SSDEEP
1536:Om7wjsVTJ+p3JrkGLawHE/E2j+ENmYJgU9BNtVhX4hFISo:p+sVT45mn/bjnNqU9B5ZQFISo
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-