Overview

overview

10

Static

static

10

cce4b0bc4b...18.exe

windows7-x64

10

cce4b0bc4b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cce4b0bc4b6262a2da88040db894e7a5_JaffaCakes118

  • Size

    270KB

  • Sample

    240831-qrgnpawbqq

  • MD5

    cce4b0bc4b6262a2da88040db894e7a5

  • SHA1

    fa8f6d0f0b7128e27b7cbd050af70b30e22ff453

  • SHA256

    11a769568692bad35094efbb3219542fec7ae55d7e92a7b98a52fb56123bae46

  • SHA512

    26f837b86ff1dd33961fce275f111b6ca52245d4b9ca57bdd2c1f62aa83a3ff80ce8a199028bac3f9baf8509c9fbc831dc4b8126c5f18884e8c10a482649e5dd

  • SSDEEP

    6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53Eupc:5YnBSkuVUeZdYqwTK

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      cce4b0bc4b6262a2da88040db894e7a5_JaffaCakes118

    • Size

      270KB

    • MD5

      cce4b0bc4b6262a2da88040db894e7a5

    • SHA1

      fa8f6d0f0b7128e27b7cbd050af70b30e22ff453

    • SHA256

      11a769568692bad35094efbb3219542fec7ae55d7e92a7b98a52fb56123bae46

    • SHA512

      26f837b86ff1dd33961fce275f111b6ca52245d4b9ca57bdd2c1f62aa83a3ff80ce8a199028bac3f9baf8509c9fbc831dc4b8126c5f18884e8c10a482649e5dd

    • SSDEEP

      6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53Eupc:5YnBSkuVUeZdYqwTK

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks