Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
11/07/2024, 18:06
General
-
Target
3a343f4264805ef4da5a14ac11a42f67_JaffaCakes118.exe
-
Size
629KB
-
MD5
3a343f4264805ef4da5a14ac11a42f67
-
SHA1
defc67b535b45d167c868fc1f8d23cb885249260
-
SHA256
d4d3a3263938b43dd40e19353aabbae4ca9f8e1a6ab593be9c8f26f9ebeb34de
-
SHA512
adeffc8eef0f46018e145f40322e7a1b4597895ca2ba42ea82cb1676b81e640277a5c51fd38013b732f62b906502183c3744c746f11df67ae86e3fa0d1650807
-
SSDEEP
12288:GJ7DrNWjwNEWATjh974oK1VNKfVHCxHONKq6VumFi/60gM6S:GJPZtypGoyVgVHCMoq6XzLMz
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a343f4264805ef4da5a14ac11a42f67_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3a343f4264805ef4da5a14ac11a42f67_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
656KB
-
Filesize
4KB