General
-
Target
f2e1f80169d5e59917834f62b74b87a9_JaffaCakes118
-
Size
98KB
-
Sample
241215-h4bdfaxma1
-
MD5
f2e1f80169d5e59917834f62b74b87a9
-
SHA1
2972647cfd802c2fd36b2a2b4d4fca9c9b4b2162
-
SHA256
b8365315225a86f4d11d24877427a6c7a9fbc9a24e144a24a724e8d31619aaac
-
SHA512
c0cc5238e67883e50dad4f2dbea56604253c3384a451ecf3b7c8e355f2367505380492acbc78a388af869bbf2b4d351d43d1db81fe8b18948243fae3e9795c9e
-
SSDEEP
3072:T3quciYGlphrMLTM+CbspEdEIASBMtw6RxmJxS:bcLGlPIM+ispEdjXBWRxSx
Behavioral task
behavioral1
Sample
f2e1f80169d5e59917834f62b74b87a9_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f2e1f80169d5e59917834f62b74b87a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
f2e1f80169d5e59917834f62b74b87a9_JaffaCakes118
-
Size
98KB
-
MD5
f2e1f80169d5e59917834f62b74b87a9
-
SHA1
2972647cfd802c2fd36b2a2b4d4fca9c9b4b2162
-
SHA256
b8365315225a86f4d11d24877427a6c7a9fbc9a24e144a24a724e8d31619aaac
-
SHA512
c0cc5238e67883e50dad4f2dbea56604253c3384a451ecf3b7c8e355f2367505380492acbc78a388af869bbf2b4d351d43d1db81fe8b18948243fae3e9795c9e
-
SSDEEP
3072:T3quciYGlphrMLTM+CbspEdEIASBMtw6RxmJxS:bcLGlPIM+ispEdjXBWRxSx
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Executes dropped EXE
-