Overview

overview

10

Static

static

10

c1cd58da24...18.exe

windows7-x64

10

c1cd58da24...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1cd58da249572f6d417d1a252846c4c_JaffaCakes118

  • Size

    310KB

  • Sample

    240825-3bgpza1djd

  • MD5

    c1cd58da249572f6d417d1a252846c4c

  • SHA1

    c799d4a7589a6e0bc9ec1a38d8c3f169b3a1e1f4

  • SHA256

    13a01509ceb6c711880aae4204ed5907908ca7689cd810d99de62d995dde971b

  • SHA512

    905bf7c6b20852e60bf8fab8f689c63dbe415af7b1ca99a30388703aef2e37fd306190ade2bf53ad7885bdf5c4ecf5990eb3bcf0f2f90f5c8fcea9719c0f2673

  • SSDEEP

    6144:zG377xS2Vp2CeiorXhwTBN53hpcCJJvHRRoS:Cr7xS2Vp6FwTnbJJvH/oS

Score
10/10
modiloaderdiscoveryevasiontrojanupx

Malware Config

Targets

    • Target

      c1cd58da249572f6d417d1a252846c4c_JaffaCakes118

    • Size

      310KB

    • MD5

      c1cd58da249572f6d417d1a252846c4c

    • SHA1

      c799d4a7589a6e0bc9ec1a38d8c3f169b3a1e1f4

    • SHA256

      13a01509ceb6c711880aae4204ed5907908ca7689cd810d99de62d995dde971b

    • SHA512

      905bf7c6b20852e60bf8fab8f689c63dbe415af7b1ca99a30388703aef2e37fd306190ade2bf53ad7885bdf5c4ecf5990eb3bcf0f2f90f5c8fcea9719c0f2673

    • SSDEEP

      6144:zG377xS2Vp2CeiorXhwTBN53hpcCJJvHRRoS:Cr7xS2Vp6FwTnbJJvH/oS

    Score
    10/10
    modiloaderdiscoveryevasiontrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks