Overview

overview

10

Static

static

10

3d73166c8f...18.exe

windows7-x64

10

3d73166c8f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d73166c8fa0e5f7d00ea3793a343c75_JaffaCakes118

  • Size

    270KB

  • Sample

    240514-cacfraed8t

  • MD5

    3d73166c8fa0e5f7d00ea3793a343c75

  • SHA1

    e10790dc318bb248f7354ce045de980252537122

  • SHA256

    5247eda8caaf339b53d697c43ae4e889eafd3bee4a7a6920456119fd18026090

  • SHA512

    5b2f21ee63cdece104ea4fdcb5fd1291346e6f55c8bcd36609ef5a6d8bb8b69f78352772d0148aa7005449a31850f46e4e0fca6e5b4c9a637ee28b81a3c25202

  • SSDEEP

    6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53qpc:5YnBSkuVUeZdYqwTp

Score
10/10
modiloaderevasiontrojan

Malware Config

Targets

    • Target

      3d73166c8fa0e5f7d00ea3793a343c75_JaffaCakes118

    • Size

      270KB

    • MD5

      3d73166c8fa0e5f7d00ea3793a343c75

    • SHA1

      e10790dc318bb248f7354ce045de980252537122

    • SHA256

      5247eda8caaf339b53d697c43ae4e889eafd3bee4a7a6920456119fd18026090

    • SHA512

      5b2f21ee63cdece104ea4fdcb5fd1291346e6f55c8bcd36609ef5a6d8bb8b69f78352772d0148aa7005449a31850f46e4e0fca6e5b4c9a637ee28b81a3c25202

    • SSDEEP

      6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53qpc:5YnBSkuVUeZdYqwTp

    Score
    10/10
    modiloaderevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Defense Evasion

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Impair Defenses

1
T1562

Disable or Modify Tools

1
T1562.001

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks