Overview

overview

10

Static

static

10

46ffc736f0...18.exe

windows7-x64

10

46ffc736f0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46ffc736f0d09828c0a85ad5f25e0cf6_JaffaCakes118

  • Size

    270KB

  • Sample

    240515-ttmjhahe54

  • MD5

    46ffc736f0d09828c0a85ad5f25e0cf6

  • SHA1

    194d0a8843cce3b7e898e26de8d68a111acf1b62

  • SHA256

    c05ce9b916409042b4b656368771009d06f4d69fe9f7ccb7edd104c45fcddfce

  • SHA512

    89af7159a8edc116f8cf3e844bcddbf515e95b407d745475070a048b77bfbecb1e2224cbafad00e7fb3eda8bd1424a4749c1fb60248bcd83f09c0b4c907ae361

  • SSDEEP

    6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53qVpc:5YnBSkuVUeZdYqwTn

Score
10/10
modiloaderevasiontrojan

Malware Config

Targets

    • Target

      46ffc736f0d09828c0a85ad5f25e0cf6_JaffaCakes118

    • Size

      270KB

    • MD5

      46ffc736f0d09828c0a85ad5f25e0cf6

    • SHA1

      194d0a8843cce3b7e898e26de8d68a111acf1b62

    • SHA256

      c05ce9b916409042b4b656368771009d06f4d69fe9f7ccb7edd104c45fcddfce

    • SHA512

      89af7159a8edc116f8cf3e844bcddbf515e95b407d745475070a048b77bfbecb1e2224cbafad00e7fb3eda8bd1424a4749c1fb60248bcd83f09c0b4c907ae361

    • SSDEEP

      6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53qVpc:5YnBSkuVUeZdYqwTn

    Score
    10/10
    modiloaderevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Defense Evasion

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Impair Defenses

1
T1562

Disable or Modify Tools

1
T1562.001

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks