General
-
Target
ec22c5788cbde589c3ffa799c83065ea_JaffaCakes118
-
Size
520KB
-
Sample
240919-y8frqayhnn
-
MD5
ec22c5788cbde589c3ffa799c83065ea
-
SHA1
905ded159895b509987f4a8d7b01e493577acd44
-
SHA256
36fe05f03f9e6f218d318baec249e1b04a46003ba08db5bf213b2cab488fcbc3
-
SHA512
b5e17c38e0804eed7cf1697602654f57297352ddfe09129642e8abc400257aff90ee3b372e7480559c440d835f4aa1584ecdd1634fc5e216cc1a1fcb152df131
-
SSDEEP
12288:HptmIaomgFprkcxpB8F3Z4mxx5aOeKxTVJCwj+mYi:H/BrjFl8QmX553HFSTi
Static task
static1
Behavioral task
behavioral1
Sample
ec22c5788cbde589c3ffa799c83065ea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ec22c5788cbde589c3ffa799c83065ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ec22c5788cbde589c3ffa799c83065ea_JaffaCakes118
-
Size
520KB
-
MD5
ec22c5788cbde589c3ffa799c83065ea
-
SHA1
905ded159895b509987f4a8d7b01e493577acd44
-
SHA256
36fe05f03f9e6f218d318baec249e1b04a46003ba08db5bf213b2cab488fcbc3
-
SHA512
b5e17c38e0804eed7cf1697602654f57297352ddfe09129642e8abc400257aff90ee3b372e7480559c440d835f4aa1584ecdd1634fc5e216cc1a1fcb152df131
-
SSDEEP
12288:HptmIaomgFprkcxpB8F3Z4mxx5aOeKxTVJCwj+mYi:H/BrjFl8QmX553HFSTi
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-