General
-
Target
fc376ec89b9b3c7d106e15de150102d9_JaffaCakes118
-
Size
332KB
-
Sample
240928-nplthstdrq
-
MD5
fc376ec89b9b3c7d106e15de150102d9
-
SHA1
fe868b4c6b364544891770e403df2d2f68a9ad27
-
SHA256
579d7c273fbd100446da46d0d6b60a483edaa0eb2a5b116d17c211b08bb165db
-
SHA512
8d74b1532fb8fdd1668bb7433bc7a38f88d2ac25b0af5f4cf8c8a30d79991c82a518d71dc96d211f11f09b2f31c9fd45f3d3ca856495398a5456bd95dd03253b
-
SSDEEP
6144:9DfhqKtQvS++hvO9NFm7wdumU5jaOqpivQkkrbxVkmDLiVDQ5jY2jS0moe0:nBSS++hWzFmU8mU5jCivuPXPiKM2BhN
Static task
static1
Behavioral task
behavioral1
Sample
fc376ec89b9b3c7d106e15de150102d9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fc376ec89b9b3c7d106e15de150102d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fc376ec89b9b3c7d106e15de150102d9_JaffaCakes118
-
Size
332KB
-
MD5
fc376ec89b9b3c7d106e15de150102d9
-
SHA1
fe868b4c6b364544891770e403df2d2f68a9ad27
-
SHA256
579d7c273fbd100446da46d0d6b60a483edaa0eb2a5b116d17c211b08bb165db
-
SHA512
8d74b1532fb8fdd1668bb7433bc7a38f88d2ac25b0af5f4cf8c8a30d79991c82a518d71dc96d211f11f09b2f31c9fd45f3d3ca856495398a5456bd95dd03253b
-
SSDEEP
6144:9DfhqKtQvS++hvO9NFm7wdumU5jaOqpivQkkrbxVkmDLiVDQ5jY2jS0moe0:nBSS++hWzFmU8mU5jCivuPXPiKM2BhN
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-