General
-
Target
JaffaCakes118_976676bad8db26a6bbd98a9cb28a3a84
-
Size
3.9MB
-
Sample
250329-yz6lsasrv6
-
MD5
976676bad8db26a6bbd98a9cb28a3a84
-
SHA1
0b6aacba508efe9bb01d598e5649fc1b890d143e
-
SHA256
95fd7c6a707703a00f29273f7d806492c771cfc37ed7ea4762db96d87f7c3e5e
-
SHA512
3c99ad746fbce94389de0fc203565ce175e042f79c7171c45c4d6df83708a9a2bfc4814baa0ffc5e0a530d9eb6bd727a25f6554832bcf54df8d8fc2b468f5b42
-
SSDEEP
98304:vk0u9RjiOqC9QeS3gfuW4CQuNsdaDCIKapPvHFr3O65LKAeD9YEIaxWRXK/Btvj:vk/9RjiOqC9PSbW4huLzhpPvHFi65LKZ
Behavioral task
behavioral1
Sample
JaffaCakes118_976676bad8db26a6bbd98a9cb28a3a84.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_976676bad8db26a6bbd98a9cb28a3a84.exe
Resource
win10v2004-20250314-en
Malware Config
Targets
-
-
Target
JaffaCakes118_976676bad8db26a6bbd98a9cb28a3a84
-
Size
3.9MB
-
MD5
976676bad8db26a6bbd98a9cb28a3a84
-
SHA1
0b6aacba508efe9bb01d598e5649fc1b890d143e
-
SHA256
95fd7c6a707703a00f29273f7d806492c771cfc37ed7ea4762db96d87f7c3e5e
-
SHA512
3c99ad746fbce94389de0fc203565ce175e042f79c7171c45c4d6df83708a9a2bfc4814baa0ffc5e0a530d9eb6bd727a25f6554832bcf54df8d8fc2b468f5b42
-
SSDEEP
98304:vk0u9RjiOqC9QeS3gfuW4CQuNsdaDCIKapPvHFr3O65LKAeD9YEIaxWRXK/Btvj:vk/9RjiOqC9PSbW4huLzhpPvHFi65LKZ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-