Overview

overview

10

Static

static

3

012b38d8c8...18.exe

windows7-x64

10

012b38d8c8...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-06-2024 23:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    012b38d8c87c168e3e9b2abd1c274b16_JaffaCakes118.exe

  • Size

    385KB

  • MD5

    012b38d8c87c168e3e9b2abd1c274b16

  • SHA1

    c7bd7f3aaf80f0a1464db6c8266f6b0668434be3

  • SHA256

    1e16bfe4a8a37e5ecbacbf519be628550feeeb7d93e645b19e940c9444548b2c

  • SHA512

    274804f816836806e62d299e0c0383f2c39e693063abb79a3b44625b77c3d75766fe8ad1376dbffc200c1647b7837b6ae636a4e49e00e1525886b442a1cee439

  • SSDEEP

    6144:d1GAGqPeKF2idZecnl20lHRxp3g5nY9E0x4GngbQXKh7UDcxRjq5zqSgxnyjZPIb:XeqFF3Z4mxxYY9Ea/yQg7UuJqzgxnqQb

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\012b38d8c87c168e3e9b2abd1c274b16_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\012b38d8c87c168e3e9b2abd1c274b16_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\Common Files\microsoft shared\MSInfo\atmQQ2.dll
    Filesize

    21KB

    MD5

    ee0f82071c287a51e3ba735d0530c215

    SHA1

    5b7c1845f826da163151f92488657ca30c538c1e

    SHA256

    6f1a87efb957c1d00c6574c4dc21782ddd2ae77910dc60cb4cf33ab6fb4b2aa6

    SHA512

    c3ef92d45d8e1624a022de97548fdad06e5601a48176bd91c978c1200eef99170d77242c4bcb19c527387fdc1f15b4c9e32a056e3ff6194542fca21b93c2b6a1

    Download Submit
  • memory/3784-0-0x0000000000400000-0x000000000046F000-memory.dmp
    Filesize

    444KB

    Download
  • memory/3784-1-0x0000000002130000-0x0000000002184000-memory.dmp
    Filesize

    336KB

    Download
  • memory/3784-2-0x0000000000400000-0x000000000046F000-memory.dmp
    Filesize

    444KB

    Download
  • memory/3784-9-0x0000000002100000-0x0000000002101000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-11-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-10-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-8-0x0000000002110000-0x0000000002111000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-7-0x0000000000600000-0x0000000000601000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-6-0x0000000000610000-0x0000000000611000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-5-0x0000000002120000-0x0000000002121000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-4-0x00000000020D0000-0x00000000020D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-3-0x00000000020F0000-0x00000000020F1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-18-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-19-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-27-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-29-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-28-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-35-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-57-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-63-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-72-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-81-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-93-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-95-0x00000000034A0000-0x00000000034C4000-memory.dmp
    Filesize

    144KB

    Download
  • memory/3784-94-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-92-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-91-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-90-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-89-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-88-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-87-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-86-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-85-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-84-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-83-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-82-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-80-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-79-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-78-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-77-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-76-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-75-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-74-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-73-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-71-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-70-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-69-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-68-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-67-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-66-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-65-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-64-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-62-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-61-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-60-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-59-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-58-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-56-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-55-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-54-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-53-0x00000000023D0000-0x00000000023D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-52-0x0000000002370000-0x0000000002371000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-51-0x0000000002380000-0x0000000002381000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-50-0x00000000023A0000-0x00000000023A1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-49-0x00000000023C0000-0x00000000023C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-48-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-47-0x00000000022D0000-0x00000000022D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-46-0x0000000002340000-0x0000000002341000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-45-0x0000000002310000-0x0000000002311000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-44-0x0000000002320000-0x0000000002321000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-43-0x00000000022B0000-0x00000000022B1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-42-0x00000000022C0000-0x00000000022C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-41-0x0000000002330000-0x0000000002331000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-40-0x00000000022E0000-0x00000000022E1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-39-0x0000000002300000-0x0000000002301000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-38-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-37-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-34-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-36-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-33-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-32-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-31-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-30-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-25-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-24-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-23-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-26-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-22-0x0000000002290000-0x0000000002291000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3784-21-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-20-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-96-0x0000000000400000-0x000000000046F000-memory.dmp
    Filesize

    444KB

    Download
  • memory/3784-98-0x0000000002130000-0x0000000002184000-memory.dmp
    Filesize

    336KB

    Download
  • memory/3784-99-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-100-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-101-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-102-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-103-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/3784-104-0x00000000032A0000-0x00000000033A0000-memory.dmp
    Filesize

    1024KB

    Download