General
-
Target
eb903ba4825444383a00ec563caa0544_JaffaCakes118
-
Size
680KB
-
Sample
240919-r7lg9atgnf
-
MD5
eb903ba4825444383a00ec563caa0544
-
SHA1
88e546b3f99a16ac01440177d936eef129d97972
-
SHA256
ee88f0c7776e084a5bbd631971c50dbda6190cb1d76aff7d34f14bd766809483
-
SHA512
a1cf64622387b44d491edbd370ed43d35efb07338c7337170b010a93422c3efb60b50e6a9c80cf9f3c9e770b18c22f87918b3cac7c7117cde9bd1da5885e1124
-
SSDEEP
12288:zw1ESd+7yGp93lW9WASbOG04zMw8/HAVUh9Hc8HYfTTx:nT7T93lW9qbOn4YL/aUh91HsTTx
Behavioral task
behavioral1
Sample
eb903ba4825444383a00ec563caa0544_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb903ba4825444383a00ec563caa0544_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
eb903ba4825444383a00ec563caa0544_JaffaCakes118
-
Size
680KB
-
MD5
eb903ba4825444383a00ec563caa0544
-
SHA1
88e546b3f99a16ac01440177d936eef129d97972
-
SHA256
ee88f0c7776e084a5bbd631971c50dbda6190cb1d76aff7d34f14bd766809483
-
SHA512
a1cf64622387b44d491edbd370ed43d35efb07338c7337170b010a93422c3efb60b50e6a9c80cf9f3c9e770b18c22f87918b3cac7c7117cde9bd1da5885e1124
-
SSDEEP
12288:zw1ESd+7yGp93lW9WASbOG04zMw8/HAVUh9Hc8HYfTTx:nT7T93lW9qbOn4YL/aUh91HsTTx
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-