General
- Target jaffacakes118_Setup_2sd29x1y.exe
- Size 588KB
- Sample260910-ea4lcaeq3y
- SHA256 94081b02e8397d08cf58b697c9a76fff098a71606fa8f2b34f2261886c257625
- MD5 4bb9a1871b083bce6001e07cf6b51cbd
- SHA1 b986580669572cedd838107f16b00dfb1fa83fa8
- SHA512 a83a38a0deadf97f22ea83cbc15d5e2493836fa710df1c4c1e18dd1dc1f1818c29dcef0716f95f699d0346231681bcba00278dbf56aa8f564681fa53ca3a7da4
- SSDEEP 12288:F1BnrDGvdpHHmiOjPXlPlWYvMzgHIgeVzOSOpNEhJLYAV:LBnWdpnHA7WYvMzgNQhJLYS
- TLSH T1D1D41204F7D290F7C4484B301CED6A32E738FF252B31B11997954E696C2DA91B868FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Setup_2sd29x1y.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Setup_2sd29x1y.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Setup_2sd29x1y.exe
- Size 588KB
- SHA256 94081b02e8397d08cf58b697c9a76fff098a71606fa8f2b34f2261886c257625
- MD5 4bb9a1871b083bce6001e07cf6b51cbd
- SHA1 b986580669572cedd838107f16b00dfb1fa83fa8
- SHA512 a83a38a0deadf97f22ea83cbc15d5e2493836fa710df1c4c1e18dd1dc1f1818c29dcef0716f95f699d0346231681bcba00278dbf56aa8f564681fa53ca3a7da4
- SSDEEP 12288:F1BnrDGvdpHHmiOjPXlPlWYvMzgHIgeVzOSOpNEhJLYAV:LBnWdpnHA7WYvMzgNQhJLYS
- TLSH T1D1D41204F7D290F7C4484B301CED6A32E738FF252B31B11997954E696C2DA91B868FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE