General
-
Target
c218c5652cd111045f423521cc70ec4b_JaffaCakes118
-
Size
689KB
-
Sample
241204-mdt53sxphm
-
MD5
c218c5652cd111045f423521cc70ec4b
-
SHA1
c2a202ad89ae4d899a67ce54492f3c0328d96310
-
SHA256
11c3716ff2e5f4f1e05f44578a893ca2f2d3856cca72cc0051c16f0c92abdeae
-
SHA512
57232dc35a17ed816686906b531d7cfcd672164a0668af9f4cd06c89362dc406b807a8e7a74bdf70761e7175268bbfe7f11df9c9aed5956fa74543471cc9540f
-
SSDEEP
12288:Kugl095nSxHxzsFb+4pbzsUn7XFLvEoqezYRoKLTK8:hy0XSxH9so4pHZRTNc7LT3
Behavioral task
behavioral1
Sample
c218c5652cd111045f423521cc70ec4b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c218c5652cd111045f423521cc70ec4b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
c218c5652cd111045f423521cc70ec4b_JaffaCakes118
-
Size
689KB
-
MD5
c218c5652cd111045f423521cc70ec4b
-
SHA1
c2a202ad89ae4d899a67ce54492f3c0328d96310
-
SHA256
11c3716ff2e5f4f1e05f44578a893ca2f2d3856cca72cc0051c16f0c92abdeae
-
SHA512
57232dc35a17ed816686906b531d7cfcd672164a0668af9f4cd06c89362dc406b807a8e7a74bdf70761e7175268bbfe7f11df9c9aed5956fa74543471cc9540f
-
SSDEEP
12288:Kugl095nSxHxzsFb+4pbzsUn7XFLvEoqezYRoKLTK8:hy0XSxH9so4pHZRTNc7LT3
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Drops file in System32 directory
-