Overview

overview

10

Static

static

7

02f9e86539...18.exe

windows7-x64

10

02f9e86539...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02f9e86539fb0ecd4993caafbe26a41d_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240620-fkp2dazeje

  • MD5

    02f9e86539fb0ecd4993caafbe26a41d

  • SHA1

    8d14c24a68b02aa216b45326772b121a5e0ba6fb

  • SHA256

    ec5da3fa6ed1992f5675f36f6abceae7aad69f6fa46acf6a2f15ec0963e83813

  • SHA512

    b64f96f7e42657148a65a7b47afc4df78b15760fc20133cb0cd0a6e159033a8ee30ae2874b0777f07af927223b918aef87ca0407d76b9460bbc77cf72cc99b52

  • SSDEEP

    24576:QZ/jX1ApUYthFIoXSBsGvr06ui9qNJNRQfSkfYPdCY9K0Xdv:QZ/jOGYDFFXStT0LXb/ZeYQYA0Xx

Score
10/10
modiloadertrojanupx

Malware Config

Targets

    • Target

      02f9e86539fb0ecd4993caafbe26a41d_JaffaCakes118

    • Size

      1.2MB

    • MD5

      02f9e86539fb0ecd4993caafbe26a41d

    • SHA1

      8d14c24a68b02aa216b45326772b121a5e0ba6fb

    • SHA256

      ec5da3fa6ed1992f5675f36f6abceae7aad69f6fa46acf6a2f15ec0963e83813

    • SHA512

      b64f96f7e42657148a65a7b47afc4df78b15760fc20133cb0cd0a6e159033a8ee30ae2874b0777f07af927223b918aef87ca0407d76b9460bbc77cf72cc99b52

    • SSDEEP

      24576:QZ/jX1ApUYthFIoXSBsGvr06ui9qNJNRQfSkfYPdCY9K0Xdv:QZ/jOGYDFFXStT0LXb/ZeYQYA0Xx

    Score
    10/10
    modiloadertrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks