General
- Target jaffacakes118_1965f99a51f6c5d332470babee2a88c304475daa1fecd4828eda54d6e5801547.bin
- Size 277KB
- Sample260924-mn82zssfla
- SHA256 1965f99a51f6c5d332470babee2a88c304475daa1fecd4828eda54d6e5801547
- MD5 68622405cdffd8ffe96eb60927b0a214
- SHA1 d4be98476f9d8ea5811e6ca3af8bbf11b7541140
- SHA512 9460e36149c136eb0816635e2c75a180af776e2949e7662c1d5bd83b4e91627eb53930afaa41cef351248a851f0e035ea54291804aeac211c2d276197aab9a9d
- SSDEEP 6144:uPe2zaf5+rIbZYJPz0DBmv0s7HJ5YGo9JZ:uz+f5+MbiADBwxDx
- TLSH T1E9545C23F1D18877D1731E7CCD1696A4A82ABF513E79345A7AE80E489B3D2D1786C2C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jaffacakes118_1965f99a51f6c5d332470babee2a88c304475daa1fecd4828eda54d6e5801547.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_1965f99a51f6c5d332470babee2a88c304475daa1fecd4828eda54d6e5801547.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_1965f99a51f6c5d332470babee2a88c304475daa1fecd4828eda54d6e5801547.bin
- Size 277KB
- SHA256 1965f99a51f6c5d332470babee2a88c304475daa1fecd4828eda54d6e5801547
- MD5 68622405cdffd8ffe96eb60927b0a214
- SHA1 d4be98476f9d8ea5811e6ca3af8bbf11b7541140
- SHA512 9460e36149c136eb0816635e2c75a180af776e2949e7662c1d5bd83b4e91627eb53930afaa41cef351248a851f0e035ea54291804aeac211c2d276197aab9a9d
- SSDEEP 6144:uPe2zaf5+rIbZYJPz0DBmv0s7HJ5YGo9JZ:uz+f5+MbiADBwxDx
- TLSH T1E9545C23F1D18877D1731E7CCD1696A4A82ABF513E79345A7AE80E489B3D2D1786C2C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Modifies WinLogon for persistence