General
- Target jaffacakes118_Backdoor.Win32.Turkojan.ake.2dcbacb3aa38425171406ff8e4efa539
- Size 346KB
- Sample261016-m6abdadw7p
- SHA256 6058e84d83c9fc2b03cb9a8596516f86f3af4545d290fdf49e4cf8488bc93840
- MD5 2dcbacb3aa38425171406ff8e4efa539
- SHA1 44b8a1d193df299ea631cd03a17b8e4cb4988d3c
- SHA512 9078cfc8d0e180417589cd7c22f87b76ca581e20840dc32ea618a279f3753843f528133bfba2d73785a1b3340c74ac112ab558b33c6a6774520d487902fc11ae
- SSDEEP 6144:AGyjnBSkuV1d4eZd88ORJIfrwTBttxYtaCa93ejl53Apca:rYnBSkuVUeZdYGwTPYtPaejof
- TLSH T1E474AE34F640C977D0720B3C8C5FE3E995297F302E256493FAD56F4CAC7A2926A281D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Backdoor.Win32.Turkojan.ake.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Backdoor.Win32.Turkojan.ake.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Backdoor.Win32.Turkojan.ake.2dcbacb3aa38425171406ff8e4efa539
- Size 346KB
- SHA256 6058e84d83c9fc2b03cb9a8596516f86f3af4545d290fdf49e4cf8488bc93840
- MD5 2dcbacb3aa38425171406ff8e4efa539
- SHA1 44b8a1d193df299ea631cd03a17b8e4cb4988d3c
- SHA512 9078cfc8d0e180417589cd7c22f87b76ca581e20840dc32ea618a279f3753843f528133bfba2d73785a1b3340c74ac112ab558b33c6a6774520d487902fc11ae
- SSDEEP 6144:AGyjnBSkuV1d4eZd88ORJIfrwTBttxYtaCa93ejl53Apca:rYnBSkuVUeZdYGwTPYtPaejof
- TLSH T1E474AE34F640C977D0720B3C8C5FE3E995297F302E256493FAD56F4CAC7A2926A281D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Checks whether UAC is enabled