Overview

overview

10

Static

static

3

ce99304a3c...18.exe

windows11-21h2-x64

10

Resubmissions

06/09/2024, 04:03

240906-emhveawarc 10

06/09/2024, 03:59

240906-ej488svhmh 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce99304a3c79767d40aa006027854beb_JaffaCakes118

  • Size

    8.5MB

  • Sample

    240906-emhveawarc

  • MD5

    ce99304a3c79767d40aa006027854beb

  • SHA1

    88f373b398ec411933745fdc3071bab266a87b38

  • SHA256

    642b1509c9bdfa304fd9a34740a3f11837f8c5d0b7b1374d443176b369386116

  • SHA512

    b17535ed143961bbb4a44ab23e9b99ea278d7dfe4249d7f0fae781c07e596000bd44a0880e275e4aefbf9d609af0b9645cc57ddf4bce2c68a825138ff57e4cfa

  • SSDEEP

    12288:zOzBHyBSHPcrMXUQMrfjDBun54DFluXCGLU6W3erKmhCd3C:zOzBHDPwrJlmUrOGm4d3C

Score
10/10
modiloaderdiscoveryevasionpersistencetrojanupx

Malware Config

Targets

    • Target

      ce99304a3c79767d40aa006027854beb_JaffaCakes118

    • Size

      8.5MB

    • MD5

      ce99304a3c79767d40aa006027854beb

    • SHA1

      88f373b398ec411933745fdc3071bab266a87b38

    • SHA256

      642b1509c9bdfa304fd9a34740a3f11837f8c5d0b7b1374d443176b369386116

    • SHA512

      b17535ed143961bbb4a44ab23e9b99ea278d7dfe4249d7f0fae781c07e596000bd44a0880e275e4aefbf9d609af0b9645cc57ddf4bce2c68a825138ff57e4cfa

    • SSDEEP

      12288:zOzBHyBSHPcrMXUQMrfjDBun54DFluXCGLU6W3erKmhCd3C:zOzBHDPwrJlmUrOGm4d3C

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks