General
-
Target
fb5b6ebb519b8bded191465d86857832_JaffaCakes118
-
Size
641KB
-
Sample
240928-da345swalh
-
MD5
fb5b6ebb519b8bded191465d86857832
-
SHA1
83ddfd087f4c424d63d67765caca21cf0eb7d0e1
-
SHA256
55baedb6ab7a09aed7ec88002770e1bf55c3bea3bd9c001944821742f015d2e4
-
SHA512
60971d62818f138ec2517e548849430a6d406a5369b1dc9b8221a7976a61a16804f00114534b4b04dd941e9884ec4a8cacf0c20e691d589639f8f43ef763e976
-
SSDEEP
12288:vt1RoiM5uZ3Z0JR2OGoXZiylyq4c5jYIfJGfF3Z4mxxN0MHoTAFbcm:F1PMs5OR2OGQQGJYQmXNK7m
Static task
static1
Behavioral task
behavioral1
Sample
fb5b6ebb519b8bded191465d86857832_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fb5b6ebb519b8bded191465d86857832_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fb5b6ebb519b8bded191465d86857832_JaffaCakes118
-
Size
641KB
-
MD5
fb5b6ebb519b8bded191465d86857832
-
SHA1
83ddfd087f4c424d63d67765caca21cf0eb7d0e1
-
SHA256
55baedb6ab7a09aed7ec88002770e1bf55c3bea3bd9c001944821742f015d2e4
-
SHA512
60971d62818f138ec2517e548849430a6d406a5369b1dc9b8221a7976a61a16804f00114534b4b04dd941e9884ec4a8cacf0c20e691d589639f8f43ef763e976
-
SSDEEP
12288:vt1RoiM5uZ3Z0JR2OGoXZiylyq4c5jYIfJGfF3Z4mxxN0MHoTAFbcm:F1PMs5OR2OGQQGJYQmXNK7m
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-