General
-
Target
f5ac6176b3ffcda06b63f6bb2cfdb2f6_JaffaCakes118
-
Size
932KB
-
Sample
240925-k45y6axarp
-
MD5
f5ac6176b3ffcda06b63f6bb2cfdb2f6
-
SHA1
44ae9d992a4a05a6ceb41e0125bc81485b7cf7e6
-
SHA256
ca04d3e86dd9da06b44d8afaabfc44669a9a4ee1bf0805a9999c170ebc5cf68d
-
SHA512
c387f1c82bcc98b999a5fe772fd68532030022031c159ae5947bfdcdea8975223291962ce471c6e29e051a251c4906991ab8a7afd9371238ff1f015584fb66b2
-
SSDEEP
24576:Lh/M4dCZ5FHb/LTGS/Wg+J3OIqMWxisk+QmXIVTzY:La4u51yS+g+J3OI1WfknmYu
Static task
static1
Behavioral task
behavioral1
Sample
f5ac6176b3ffcda06b63f6bb2cfdb2f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5ac6176b3ffcda06b63f6bb2cfdb2f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f5ac6176b3ffcda06b63f6bb2cfdb2f6_JaffaCakes118
-
Size
932KB
-
MD5
f5ac6176b3ffcda06b63f6bb2cfdb2f6
-
SHA1
44ae9d992a4a05a6ceb41e0125bc81485b7cf7e6
-
SHA256
ca04d3e86dd9da06b44d8afaabfc44669a9a4ee1bf0805a9999c170ebc5cf68d
-
SHA512
c387f1c82bcc98b999a5fe772fd68532030022031c159ae5947bfdcdea8975223291962ce471c6e29e051a251c4906991ab8a7afd9371238ff1f015584fb66b2
-
SSDEEP
24576:Lh/M4dCZ5FHb/LTGS/Wg+J3OIqMWxisk+QmXIVTzY:La4u51yS+g+J3OI1WfknmYu
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Drops file in System32 directory
-