General
-
Target
JaffaCakes118_9a65b1dfb813c823ac78a5915a6311b2
-
Size
685KB
-
Sample
250401-wjxb3as1g1
-
MD5
9a65b1dfb813c823ac78a5915a6311b2
-
SHA1
f67f5615d1a24881dc46fb07fa603663a5d306fa
-
SHA256
9e191f2cafc001c923f2d48b401903d63789ef6d25f2590d3038c73ee8742586
-
SHA512
8c116243589a3b6555d8fa5c9e329e77181c3c3381695667a0f5dd21a905ff4d62073e2d4e4fe97c3ab1788180bb407b240af795698727103f6a469dd6d15ef3
-
SSDEEP
12288:NCTO6wDNihzKWLnPpnW/AlTXE0B43v++cw4O57JCocjmBufVBHB4uwIJVvkqEfjO:V6wSK2nPpKQGXN45mqkqEN4RoNTSMI
Behavioral task
behavioral1
Sample
JaffaCakes118_9a65b1dfb813c823ac78a5915a6311b2.exe
Resource
win10v2004-20250314-en
Malware Config
Targets
-
-
Target
JaffaCakes118_9a65b1dfb813c823ac78a5915a6311b2
-
Size
685KB
-
MD5
9a65b1dfb813c823ac78a5915a6311b2
-
SHA1
f67f5615d1a24881dc46fb07fa603663a5d306fa
-
SHA256
9e191f2cafc001c923f2d48b401903d63789ef6d25f2590d3038c73ee8742586
-
SHA512
8c116243589a3b6555d8fa5c9e329e77181c3c3381695667a0f5dd21a905ff4d62073e2d4e4fe97c3ab1788180bb407b240af795698727103f6a469dd6d15ef3
-
SSDEEP
12288:NCTO6wDNihzKWLnPpnW/AlTXE0B43v++cw4O57JCocjmBufVBHB4uwIJVvkqEfjO:V6wSK2nPpKQGXN45mqkqEN4RoNTSMI
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-