General
-
Target
e418e068b74702886537db519ab3edfa_JaffaCakes118
-
Size
706KB
-
Sample
241212-bykllawjbw
-
MD5
e418e068b74702886537db519ab3edfa
-
SHA1
fea1946b6966bddadbac761224b00a76fd84be82
-
SHA256
e77a58f04c62c0e1d73a4bdf09d0b07c7ab296a54056911b90c0bf3f4d4e27c6
-
SHA512
9fb78e9fe79e9e5c3b0474aa1f78cb3b9c60ac6d5372f73d9ae5877a9eea11be4c89db71dd2ce2e264c9d7dcd372a5e68bae89e1b47a85eea5e26317ad273937
-
SSDEEP
12288:dtzSoEDsJ/kvRID/xtimRzOINFrGTnmQSJr5TxT/Hy+85:LmmJ/k5Kx0cOICDSrBxTPu5
Behavioral task
behavioral1
Sample
e418e068b74702886537db519ab3edfa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e418e068b74702886537db519ab3edfa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
e418e068b74702886537db519ab3edfa_JaffaCakes118
-
Size
706KB
-
MD5
e418e068b74702886537db519ab3edfa
-
SHA1
fea1946b6966bddadbac761224b00a76fd84be82
-
SHA256
e77a58f04c62c0e1d73a4bdf09d0b07c7ab296a54056911b90c0bf3f4d4e27c6
-
SHA512
9fb78e9fe79e9e5c3b0474aa1f78cb3b9c60ac6d5372f73d9ae5877a9eea11be4c89db71dd2ce2e264c9d7dcd372a5e68bae89e1b47a85eea5e26317ad273937
-
SSDEEP
12288:dtzSoEDsJ/kvRID/xtimRzOINFrGTnmQSJr5TxT/Hy+85:LmmJ/k5Kx0cOICDSrBxTPu5
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Drops file in System32 directory
-