Analysis
-
max time kernel
94s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-01-2025 05:36
General
-
Target
JaffaCakes118_becbf44ab626279edb2be2f54bb00609.exe
-
Size
677KB
-
MD5
becbf44ab626279edb2be2f54bb00609
-
SHA1
bb4d44971b5e4109f0fb91e36a24ae9ce640ee7e
-
SHA256
14d0d37d2d4995136c980e6fcbf6312dbebf9593f5e4b601eef29e5b17c6dc77
-
SHA512
9bac7a541786d4b637808a86e73f7a5ee45ea6bae909ae3773eeab90af221a4e701261da44f30a8e59b417b877e19de59a9e2cb964dc04984ae7d3c076ef0a18
-
SSDEEP
12288:QNWiaTTgd7YAp+t9G7zQ9SpbaizPwScKHkfcIhWOX3Te8x:Q3td7YAp+t9KQ9CFzPwmEtB3Tbx
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_becbf44ab626279edb2be2f54bb00609.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_becbf44ab626279edb2be2f54bb00609.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
760KB
-
Filesize
760KB