Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-01-2025 05:43
General
-
Target
JaffaCakes118_02693899800fa61c1ff2b3fd166a74be.exe
-
Size
10KB
-
MD5
02693899800fa61c1ff2b3fd166a74be
-
SHA1
cbed0b95f9d8fdcf042fbe1c805acc430fa3d997
-
SHA256
73f2c812f39fb4c226dc1f13e44ca28e0b3d14790471adc7fe9c085822485b24
-
SHA512
61bf6bade0fa0ebe06fb7391084821e286623c6e0a1963a67388181ed66bfeb5cb363518ed5e5233c6b4e9769792aa2073db2827f2928e59e6ef9ad5481dade9
-
SSDEEP
192:tNT2j6AQxqZBfdXfhy4uysiD2zgditv3FuTuVfyxj8L8Yr+4772f:t9c0xkNyjfiO8uVaxjOFW
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 1 IoCs
-
Suspicious use of SetThreadContext 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_02693899800fa61c1ff2b3fd166a74be.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_02693899800fa61c1ff2b3fd166a74be.exe"1⤵
- Suspicious use of SetThreadContext
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB