General
- Target 0ca894cb503ae044945836b161644141_JaffaCakes118
- Size 6.4MB
- Sample240621-ssaymsvhph
- SHA256 7629f878ba09da98ec0fa56671804eb22e38ffbd310e406e112cf365264c713d
- MD5 0ca894cb503ae044945836b161644141
- SHA1 ecfb42fb4c53b5761471af047985a4cfe9d0a6c5
- SHA512 b09b03b7022afd65bcef95e50a1ba1914e365b19eda78c6bc37fa4ee276c5dccb23ea3dfebaf34ceccfa249c11d50e96a0082d0028852962ffd597a6cfd65f02
- SSDEEP 196608:gSJXeR0NOrAqvDJXY5XigqipNy7I86wIpHLcql208:xXeocI7eF8Hoql208
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
HFSKY高校实验中心教学管理系统/setup.exe
Resource
win7-20240419-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
HFSKY高校实验中心教学管理系统/setup.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
HFSKY高校实验中心教学管理系统/新云软件.url
Resource
win7-20240611-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
HFSKY高校实验中心教学管理系统/新云软件.url
Resource
win10v2004-20240611-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target HFSKY高校实验中心教学管理系统/setup.exe
- Size 6.4MB
- SHA256 5cd65c4bb03b931a5c49eef70fd411e70880f176fd0628bc35fb74f8207b8605
- MD5 6be87553acd8d7442c636d1728196676
- SHA1 c44027eedf47828906a6649ed66b6e5f7db2f30c
- SHA512 7acff0f04fc021f6a2358fd0c769635054c01c1c3823555486eeec9e9e117ed9fd22e31c532f38cc09fc016a03e28cbda1824ec38ce7328557f59cd3a860eb11
- SSDEEP 196608:K1KPeka6oPZfHCUUnZxlIji9dxNzSrIF6I4O0:boPpKIG9dHuIb0
- MD5 SHA1 SHA512 SSDEEP
Score10/10ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
ModiLoader First Stage
-
- Target HFSKY高校实验中心教学管理系统/新云软件.url
- Size 261B
- SHA256 1bbc2bfe53979f537c179995a1d1b5030db3ad6f2e46b258421506a3fb0fc296
- MD5 af534adca72cbb40fcaba6adcf4aa0b3
- SHA1 486f64259c45baf815004b6ffc65301e82aecdee
- SHA512 21d4b21c0d228498275640b397e8adfcb92dca4996cb59b035eeea523c5fd0594b0c8bc66d557265343bf6e7cb35350790fcac323db841c0cd4fea6da38b70b1
- MD5 SHA1 SHA512
Score1/10