General
-
Target
JaffaCakes118_6ac4ce01f4358ce6e628893267707003
-
Size
60KB
-
Sample
250103-g61knsvqem
-
MD5
6ac4ce01f4358ce6e628893267707003
-
SHA1
7bacfc7b4f064d2e9733794981eac8611ee57485
-
SHA256
df9060125b4ec3dd0034cbc4bc23569c7183fd9fa819d8e153eae0b5c3d30755
-
SHA512
dc8a77fbf8b71ecba9af620ec1ba0ef29a61474196ebb861e8dcc7f42614176bd53d8ecd366e9eed1c29eeba1f35685f9c9c6d5a2a5cb23d3270673f473626a6
-
SSDEEP
768:sbDI8NnowdRl/XXzkk83TozeyJaelQtWPGefYosXEQyUgL2sw/3eGpEnaS4Nc:sbDXnXNolk9JpLMEQy6sXaS7
Behavioral task
behavioral1
Sample
JaffaCakes118_6ac4ce01f4358ce6e628893267707003.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6ac4ce01f4358ce6e628893267707003.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_6ac4ce01f4358ce6e628893267707003
-
Size
60KB
-
MD5
6ac4ce01f4358ce6e628893267707003
-
SHA1
7bacfc7b4f064d2e9733794981eac8611ee57485
-
SHA256
df9060125b4ec3dd0034cbc4bc23569c7183fd9fa819d8e153eae0b5c3d30755
-
SHA512
dc8a77fbf8b71ecba9af620ec1ba0ef29a61474196ebb861e8dcc7f42614176bd53d8ecd366e9eed1c29eeba1f35685f9c9c6d5a2a5cb23d3270673f473626a6
-
SSDEEP
768:sbDI8NnowdRl/XXzkk83TozeyJaelQtWPGefYosXEQyUgL2sw/3eGpEnaS4Nc:sbDXnXNolk9JpLMEQy6sXaS7
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-