Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19-07-2024 23:21
General
-
Target
5e1c27a5bb54a5ed3f941598360636b1_JaffaCakes118.exe
-
Size
12KB
-
MD5
5e1c27a5bb54a5ed3f941598360636b1
-
SHA1
ca96c59d268f85c625ac5bb10c23859f6606363f
-
SHA256
07610660984830f9417706002c9eb262d4337e4d83245fe64d5440c1b2f2f785
-
SHA512
0344286ac9e0429ab5694af9918290d83b8258dce966fce38e9f14fdd1e7901c6a730d68258ae9bdb64e5e688fd5222b53d011bb971194c90dcf2205babb48a0
-
SSDEEP
192:nmj1yTJ8brexQALo9q+nX6JwCnv3rjNMC/LPQrnSIuNLb:wyVUrQoq6K+C0nSd1
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 15 IoCs
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e1c27a5bb54a5ed3f941598360636b1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5e1c27a5bb54a5ed3f941598360636b1_JaffaCakes118.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB