General
-
Target
JaffaCakes118_818aa541dd5735813c7f33228d806e57
-
Size
564KB
-
Sample
250116-zjjyhsypgr
-
MD5
818aa541dd5735813c7f33228d806e57
-
SHA1
5c9f2a7b19d9aa0e0687e65814ffa700043c717f
-
SHA256
2554845aba12ecc2c88281b0bf0e73e577356de71a1630938e170d9668fc3346
-
SHA512
f9c3ef747682e9053a1a6173e2c2ad832a6316297e4ab4263149db5aac5dc5652d4ba4caa3a9cba5787fbf35baf1c03f942f1a898078b7514219ea373b97bda3
-
SSDEEP
12288:G0/GCIe2z0LOTp5SfFfmNZI+fZBozWhUOPLyJIUAykZEeVPRPjz:bFm8+fFh
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_818aa541dd5735813c7f33228d806e57.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_818aa541dd5735813c7f33228d806e57.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_818aa541dd5735813c7f33228d806e57
-
Size
564KB
-
MD5
818aa541dd5735813c7f33228d806e57
-
SHA1
5c9f2a7b19d9aa0e0687e65814ffa700043c717f
-
SHA256
2554845aba12ecc2c88281b0bf0e73e577356de71a1630938e170d9668fc3346
-
SHA512
f9c3ef747682e9053a1a6173e2c2ad832a6316297e4ab4263149db5aac5dc5652d4ba4caa3a9cba5787fbf35baf1c03f942f1a898078b7514219ea373b97bda3
-
SSDEEP
12288:G0/GCIe2z0LOTp5SfFfmNZI+fZBozWhUOPLyJIUAykZEeVPRPjz:bFm8+fFh
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-