General
-
Target
d90e3a1e3834e636801ee70bbd1c88b3_JaffaCakes118
-
Size
517KB
-
Sample
240910-z96vzaxdjh
-
MD5
d90e3a1e3834e636801ee70bbd1c88b3
-
SHA1
2ea151fa8b1ee7856ebb7275366b9a247f659207
-
SHA256
3c086d056fc272b192fa51b77989cc1615f9b47de20014ab28c9a7296ce286a6
-
SHA512
0a6e67635ec5989d0b1864befc29f426801aa22827815e62801fff2e91bdc92f27f21c3d4bb40d884dee631a6f1d320d5f96131e1f7abc1ab829b1d9752aaac4
-
SSDEEP
6144:4y1/wLFjc2TLtBIx/X3n+0PUzx1JoaTGOGZ5H/z9akcTNszqdmb8/XV3qVfUR2jK:DoLFjc2T32/X3nqxEQkcZmQ/twUR2CL
Behavioral task
behavioral1
Sample
d90e3a1e3834e636801ee70bbd1c88b3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d90e3a1e3834e636801ee70bbd1c88b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d90e3a1e3834e636801ee70bbd1c88b3_JaffaCakes118
-
Size
517KB
-
MD5
d90e3a1e3834e636801ee70bbd1c88b3
-
SHA1
2ea151fa8b1ee7856ebb7275366b9a247f659207
-
SHA256
3c086d056fc272b192fa51b77989cc1615f9b47de20014ab28c9a7296ce286a6
-
SHA512
0a6e67635ec5989d0b1864befc29f426801aa22827815e62801fff2e91bdc92f27f21c3d4bb40d884dee631a6f1d320d5f96131e1f7abc1ab829b1d9752aaac4
-
SSDEEP
6144:4y1/wLFjc2TLtBIx/X3n+0PUzx1JoaTGOGZ5H/z9akcTNszqdmb8/XV3qVfUR2jK:DoLFjc2T32/X3nqxEQkcZmQ/twUR2CL
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-