Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
31/08/2024, 20:36
General
-
Target
cd8db1c77b8ada427f8447d7a50680aa_JaffaCakes118.exe
-
Size
189KB
-
MD5
cd8db1c77b8ada427f8447d7a50680aa
-
SHA1
c7453e1b6d0296209d4dd98dc90b19735ce471f5
-
SHA256
b6a0eb8331b5537c1c0a4236d076507a537f88bc5929316689e2bc96ef4975c3
-
SHA512
70321cd09f12f13ba0985cc4778f1f58210973925f152b3ecef5798751a063fc4844b91cc8e3cafd2612f859d617b4a0eb83e6911d72f63fd2cbd4f906b09013
-
SSDEEP
3072:d0ndwDeFjBjp+Qr6HbgNbJLnBIyoG36iacwr54TEYTBfzikAZR:GndhNjLrSKGs6Swr54TEYTBrN
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 14 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd8db1c77b8ada427f8447d7a50680aa_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\cd8db1c77b8ada427f8447d7a50680aa_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB