General
-
Target
9f1682002d7bae733685436fb9fea13c_JaffaCakes118
-
Size
649KB
-
Sample
241126-b2hamstpbn
-
MD5
9f1682002d7bae733685436fb9fea13c
-
SHA1
b12616d750102bf212e2c113169f791f6d929340
-
SHA256
8979a0252075f4215fdfe808d3932fa241a8dafdbb38bb42d64ace59113654e8
-
SHA512
99e73744b5e9c6f5e8802f9a2cc5dc472cbf6beb5b15dba821015206c705d7e45b0c77d8ba3b6240fe490a75899b68d1790f64827491813e4c8d560ac64394c5
-
SSDEEP
12288:JZj7e1Dmjhb9d278FKazlo58b1yh1OQlLUA0qcMAoPwneGOskch3OIT:C1Dmjf0mKkoy1+095qcDLkskS3OIT
Static task
static1
Behavioral task
behavioral1
Sample
9f1682002d7bae733685436fb9fea13c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9f1682002d7bae733685436fb9fea13c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
9f1682002d7bae733685436fb9fea13c_JaffaCakes118
-
Size
649KB
-
MD5
9f1682002d7bae733685436fb9fea13c
-
SHA1
b12616d750102bf212e2c113169f791f6d929340
-
SHA256
8979a0252075f4215fdfe808d3932fa241a8dafdbb38bb42d64ace59113654e8
-
SHA512
99e73744b5e9c6f5e8802f9a2cc5dc472cbf6beb5b15dba821015206c705d7e45b0c77d8ba3b6240fe490a75899b68d1790f64827491813e4c8d560ac64394c5
-
SSDEEP
12288:JZj7e1Dmjhb9d278FKazlo58b1yh1OQlLUA0qcMAoPwneGOskch3OIT:C1Dmjf0mKkoy1+095qcDLkskS3OIT
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modifies WinLogon for persistence
-
Modiloader family
-
ModiLoader Second Stage
-
Drops file in System32 directory
-