General
-
Target
e9b02987797681bb98ea1da58c975164_JaffaCakes118
-
Size
448KB
-
Sample
240918-wn9sysvepc
-
MD5
e9b02987797681bb98ea1da58c975164
-
SHA1
b19df259aaf2259c8a1bcf4876c4b85c789bdaa9
-
SHA256
8eaa9d8824a50d189f3b11628494820daf6d6a229c9e370dbc24f13a333b1994
-
SHA512
ec63b3f3768cb7d813ce1f9dae7795358dc9e77cc119589c2d516e2f6527c2039b3d3c70a508d75edf1703ca914f18facf16d98c16f7e2d803afb181422b3759
-
SSDEEP
12288:vmrQVE41d00+3MdklDhvC7V9fz3gI5QGcTsdz5qPx:vmrOX1u0I9lDh67DzgWcsx5q
Static task
static1
Behavioral task
behavioral1
Sample
e9b02987797681bb98ea1da58c975164_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9b02987797681bb98ea1da58c975164_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e9b02987797681bb98ea1da58c975164_JaffaCakes118
-
Size
448KB
-
MD5
e9b02987797681bb98ea1da58c975164
-
SHA1
b19df259aaf2259c8a1bcf4876c4b85c789bdaa9
-
SHA256
8eaa9d8824a50d189f3b11628494820daf6d6a229c9e370dbc24f13a333b1994
-
SHA512
ec63b3f3768cb7d813ce1f9dae7795358dc9e77cc119589c2d516e2f6527c2039b3d3c70a508d75edf1703ca914f18facf16d98c16f7e2d803afb181422b3759
-
SSDEEP
12288:vmrQVE41d00+3MdklDhvC7V9fz3gI5QGcTsdz5qPx:vmrOX1u0I9lDh67DzgWcsx5q
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-