General
-
Target
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118
-
Size
1.3MB
-
Sample
240710-z2npeszgkj
-
MD5
3666a5caad40d07a6b96e791d8c91b93
-
SHA1
5de74734020a96ede8a823e535f0fb7a709322c5
-
SHA256
6af34041f3074710913dc4d0b84d3e78b643bc47f7ce8f40fc7862d17053cc06
-
SHA512
70cb4145e415c9c193e5914386dcb144fdb528a133fba784b5dc62ba5ec56a3981e0485be3d737cb0ab3edec23785a9e96be1d0b3fa32a7210d2339f7a4af9b4
-
SSDEEP
24576:ZbK5AVKfoBwDF1Gc2WOqP6PTH1thw6mmX2Lp5j4D4qmLRc+buwpROt2sF:ZbK5AVKf5GrW8j9mnvSbmmR4ROA
Behavioral task
behavioral1
Sample
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3666a5caad40d07a6b96e791d8c91b93_JaffaCakes118
-
Size
1.3MB
-
MD5
3666a5caad40d07a6b96e791d8c91b93
-
SHA1
5de74734020a96ede8a823e535f0fb7a709322c5
-
SHA256
6af34041f3074710913dc4d0b84d3e78b643bc47f7ce8f40fc7862d17053cc06
-
SHA512
70cb4145e415c9c193e5914386dcb144fdb528a133fba784b5dc62ba5ec56a3981e0485be3d737cb0ab3edec23785a9e96be1d0b3fa32a7210d2339f7a4af9b4
-
SSDEEP
24576:ZbK5AVKfoBwDF1Gc2WOqP6PTH1thw6mmX2Lp5j4D4qmLRc+buwpROt2sF:ZbK5AVKf5GrW8j9mnvSbmmR4ROA
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1