General
-
Target
74e96848891e2775f3eccd8ff0a6e886_JaffaCakes118
-
Size
53KB
-
Sample
240726-ves86stgjh
-
MD5
74e96848891e2775f3eccd8ff0a6e886
-
SHA1
5b99509765a31b753550224bfd7e772e763ed010
-
SHA256
be7e5065209753f24b0e89fdece35963d77098e45ea2a5719884ec059d2c5cd1
-
SHA512
6a3de749f66e3b95fa60eadd5832a217cb833bd16374384357a89a23cc096ff70cd814f020a70b6c29b9ab2169869fc3785550815f936053a0775a8a1803fb85
-
SSDEEP
1536:UiEcutfpC3uGrg+IPOBRF7NTCAxh1TxhA:xEa3trgf2HpNTCAxrxhA
Behavioral task
behavioral1
Sample
74e96848891e2775f3eccd8ff0a6e886_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74e96848891e2775f3eccd8ff0a6e886_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
74e96848891e2775f3eccd8ff0a6e886_JaffaCakes118
-
Size
53KB
-
MD5
74e96848891e2775f3eccd8ff0a6e886
-
SHA1
5b99509765a31b753550224bfd7e772e763ed010
-
SHA256
be7e5065209753f24b0e89fdece35963d77098e45ea2a5719884ec059d2c5cd1
-
SHA512
6a3de749f66e3b95fa60eadd5832a217cb833bd16374384357a89a23cc096ff70cd814f020a70b6c29b9ab2169869fc3785550815f936053a0775a8a1803fb85
-
SSDEEP
1536:UiEcutfpC3uGrg+IPOBRF7NTCAxh1TxhA:xEa3trgf2HpNTCAxrxhA
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-