General
-
Target
02d98b95a8871f838c5a365f24383b9a_JaffaCakes118
-
Size
417KB
-
Sample
240620-e8ae6aygqf
-
MD5
02d98b95a8871f838c5a365f24383b9a
-
SHA1
a6c1205fc773bc08ca64710dae40a74d77aca6a8
-
SHA256
67148585e3e45054749c2ea832680577ee2043705b7559d233a99c9567d55507
-
SHA512
381272c38b799872c82afe1760402d7d8b371165635c3834ee5d911d5a2bf38c0a29db27e1646bb1b93cc3f8fb4ca80796b25c70c4a582aa61db4eb08ca1b12e
-
SSDEEP
12288:ysRpeFovtrv8UXOndOGqJXkv53C4taA9tGel:y+eWlrvXXOnUKRFtH
Static task
static1
Behavioral task
behavioral1
Sample
02d98b95a8871f838c5a365f24383b9a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
02d98b95a8871f838c5a365f24383b9a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
02d98b95a8871f838c5a365f24383b9a_JaffaCakes118
-
Size
417KB
-
MD5
02d98b95a8871f838c5a365f24383b9a
-
SHA1
a6c1205fc773bc08ca64710dae40a74d77aca6a8
-
SHA256
67148585e3e45054749c2ea832680577ee2043705b7559d233a99c9567d55507
-
SHA512
381272c38b799872c82afe1760402d7d8b371165635c3834ee5d911d5a2bf38c0a29db27e1646bb1b93cc3f8fb4ca80796b25c70c4a582aa61db4eb08ca1b12e
-
SSDEEP
12288:ysRpeFovtrv8UXOndOGqJXkv53C4taA9tGel:y+eWlrvXXOnUKRFtH
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1