General
-
Target
7511b6aa64c28678203a59305da554f9_JaffaCakes118
-
Size
628KB
-
Sample
240726-wannkatenp
-
MD5
7511b6aa64c28678203a59305da554f9
-
SHA1
75644207828d02689738034e6eb084cf797bdf6f
-
SHA256
34c68cb89e2052b9d6a4b453b61fb1d24a347212d35478a92277317603924d5e
-
SHA512
e6bea935bb933f306d7a6bb76c2748f0586c33c54ad74ed0bc480f468610d98176ebc120af8ecedd8702d11e1eece4e9c75991e56a7ea8a6b4b9726c55b127d9
-
SSDEEP
12288:pUaHSIUvBl7H6xDYY7WZrpiB1+F3Z4mxx64IxSo62jDrkAwha:6aHSIGB96xsY78pif+QmXqsohkDM
Static task
static1
Behavioral task
behavioral1
Sample
7511b6aa64c28678203a59305da554f9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7511b6aa64c28678203a59305da554f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
7511b6aa64c28678203a59305da554f9_JaffaCakes118
-
Size
628KB
-
MD5
7511b6aa64c28678203a59305da554f9
-
SHA1
75644207828d02689738034e6eb084cf797bdf6f
-
SHA256
34c68cb89e2052b9d6a4b453b61fb1d24a347212d35478a92277317603924d5e
-
SHA512
e6bea935bb933f306d7a6bb76c2748f0586c33c54ad74ed0bc480f468610d98176ebc120af8ecedd8702d11e1eece4e9c75991e56a7ea8a6b4b9726c55b127d9
-
SSDEEP
12288:pUaHSIUvBl7H6xDYY7WZrpiB1+F3Z4mxx64IxSo62jDrkAwha:6aHSIGB96xsY78pif+QmXqsohkDM
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-