Analysis

  • max time kernel
    140s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-07-2024 21:46

General

  • Target

    5dcc6112c771366ef2331cec3d294588_JaffaCakes118.exe

  • Size

    590KB

  • MD5

    5dcc6112c771366ef2331cec3d294588

  • SHA1

    b9f9df87a604600b9a9d2853d681107c148125e7

  • SHA256

    fa32f0bd0d9055863e2d0da81df29d1dd57c75cfad92fd11691de4926b006f80

  • SHA512

    359fec4d8d1b604ed479fb96d5c10a57090ca56892df7b5a2db1c9569b242e0be71895c422cddec15e9059aec2b055c67e18d65e39745c4effff371760466ecb

  • SSDEEP

    12288:nZbGCaN9mZdVkF5kvu9sfO/0ZtiZF3Z4mxxxo3ABt4QCdeOA:ntGCJsevuyi0cQmXxQut4QCde1

Score
10/10

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5dcc6112c771366ef2331cec3d294588_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5dcc6112c771366ef2331cec3d294588_JaffaCakes118.exe"
    1⤵
      PID:3368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3368-0-0x0000000000400000-0x0000000000561000-memory.dmp

      Filesize

      1.4MB

    • memory/3368-1-0x0000000002350000-0x00000000023A4000-memory.dmp

      Filesize

      336KB

    • memory/3368-72-0x0000000002350000-0x00000000023A4000-memory.dmp

      Filesize

      336KB

    • memory/3368-71-0x0000000000400000-0x0000000000561000-memory.dmp

      Filesize

      1.4MB

    • memory/3368-70-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-69-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-68-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-67-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-66-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-65-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-64-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-63-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-62-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-61-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-60-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-59-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-58-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-57-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-56-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-55-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-54-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-53-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-52-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-51-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-50-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-49-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-48-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-47-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-46-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-45-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-44-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-43-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-42-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-41-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-40-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-39-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-38-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-37-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-36-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-35-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-34-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-33-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-32-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-31-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-30-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-29-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-28-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-27-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-26-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-25-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-24-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-23-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-22-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-21-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-20-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-19-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-18-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-17-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/3368-16-0x0000000003520000-0x0000000003521000-memory.dmp

      Filesize

      4KB

    • memory/3368-15-0x0000000003520000-0x0000000003521000-memory.dmp

      Filesize

      4KB

    • memory/3368-14-0x0000000003520000-0x0000000003521000-memory.dmp

      Filesize

      4KB

    • memory/3368-13-0x0000000003520000-0x0000000003521000-memory.dmp

      Filesize

      4KB

    • memory/3368-12-0x0000000003520000-0x0000000003521000-memory.dmp

      Filesize

      4KB

    • memory/3368-11-0x0000000003520000-0x0000000003521000-memory.dmp

      Filesize

      4KB

    • memory/3368-10-0x0000000002540000-0x0000000002541000-memory.dmp

      Filesize

      4KB

    • memory/3368-9-0x00000000025B0000-0x00000000025B1000-memory.dmp

      Filesize

      4KB

    • memory/3368-8-0x0000000002580000-0x0000000002581000-memory.dmp

      Filesize

      4KB

    • memory/3368-7-0x0000000002590000-0x0000000002591000-memory.dmp

      Filesize

      4KB

    • memory/3368-6-0x0000000002520000-0x0000000002521000-memory.dmp

      Filesize

      4KB

    • memory/3368-5-0x0000000002530000-0x0000000002531000-memory.dmp

      Filesize

      4KB

    • memory/3368-4-0x00000000025A0000-0x00000000025A1000-memory.dmp

      Filesize

      4KB

    • memory/3368-3-0x0000000002550000-0x0000000002551000-memory.dmp

      Filesize

      4KB

    • memory/3368-2-0x0000000002570000-0x0000000002571000-memory.dmp

      Filesize

      4KB