General
-
Target
f695a908758f9e18f4293139c7628fea_JaffaCakes118
-
Size
1.6MB
-
Sample
241216-bg1w9axqfk
-
MD5
f695a908758f9e18f4293139c7628fea
-
SHA1
79f2d1203482e3e767888559a9415ff6b8c6101f
-
SHA256
90105acad6ab39ec6a8ccf9fd727e0793edee3327046772e94866369a1891a04
-
SHA512
968cf42b228c975abf4f195e01776840d8d72d425927658f4bc7cc6d1b7063a7a7117a794b308ee6d7e4e3b61c0aa2ff038bbfa9f239e8d3a2cb39b77327fd74
-
SSDEEP
6144:Eo02k3oodyJ7CI0IJsWdm5AHyw1hDoZG1AvF/xTsPrld:KJPySIJsWdEkP1X1sxyX
Static task
static1
Behavioral task
behavioral1
Sample
f695a908758f9e18f4293139c7628fea_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f695a908758f9e18f4293139c7628fea_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
f695a908758f9e18f4293139c7628fea_JaffaCakes118
-
Size
1.6MB
-
MD5
f695a908758f9e18f4293139c7628fea
-
SHA1
79f2d1203482e3e767888559a9415ff6b8c6101f
-
SHA256
90105acad6ab39ec6a8ccf9fd727e0793edee3327046772e94866369a1891a04
-
SHA512
968cf42b228c975abf4f195e01776840d8d72d425927658f4bc7cc6d1b7063a7a7117a794b308ee6d7e4e3b61c0aa2ff038bbfa9f239e8d3a2cb39b77327fd74
-
SSDEEP
6144:Eo02k3oodyJ7CI0IJsWdm5AHyw1hDoZG1AvF/xTsPrld:KJPySIJsWdEkP1X1sxyX
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Drops file in System32 directory
-