General
-
Target
c8b0d5975f727150513a47ad997a01d9_JaffaCakes118
-
Size
1.2MB
-
Sample
241205-vvx73azpfr
-
MD5
c8b0d5975f727150513a47ad997a01d9
-
SHA1
eb5e181ba8ae2c53e2fcd6e05bd66f3687b700ea
-
SHA256
e2c083f8386a1b7fabdcd845a2cae4182d9e63f38f91c7685f0f2487320f264b
-
SHA512
2218e992da97561d3567c631f3f373d440f74490650516ac063581a51b3edb98208aeb767b3cd379d16b3976107bec62a9407b719427675acecfac7863cfd802
-
SSDEEP
24576:seDUTgvxM2quDhFtFnZt3mehudRpGPGFsfqgEnjh7V:yEuru9zFnT1od2+FgJmh7
Behavioral task
behavioral1
Sample
c8b0d5975f727150513a47ad997a01d9_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
c8b0d5975f727150513a47ad997a01d9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
c8b0d5975f727150513a47ad997a01d9_JaffaCakes118
-
Size
1.2MB
-
MD5
c8b0d5975f727150513a47ad997a01d9
-
SHA1
eb5e181ba8ae2c53e2fcd6e05bd66f3687b700ea
-
SHA256
e2c083f8386a1b7fabdcd845a2cae4182d9e63f38f91c7685f0f2487320f264b
-
SHA512
2218e992da97561d3567c631f3f373d440f74490650516ac063581a51b3edb98208aeb767b3cd379d16b3976107bec62a9407b719427675acecfac7863cfd802
-
SSDEEP
24576:seDUTgvxM2quDhFtFnZt3mehudRpGPGFsfqgEnjh7V:yEuru9zFnT1od2+FgJmh7
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-