Overview

overview

10

Static

static

3

d1afb8abbb...18.exe

windows7-x64

10

d1afb8abbb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1afb8abbb2c849aefe1287e24beabbf_JaffaCakes118

  • Size

    804KB

  • Sample

    240907-l63r9aydkq

  • MD5

    d1afb8abbb2c849aefe1287e24beabbf

  • SHA1

    548e28251e61b930f2a4708fb2cb3ae0d015f468

  • SHA256

    53b65ed186c601fcea4cbc95c701b1922bf1389df1dcb1245006c4aac1c802df

  • SHA512

    c564b4f2f19c90d4b2a9ba59e39425726da8d969b16f810227d93774bdf2c57630b52ad32c9ce4234038828ab8cf6f607ed9e8ac87de54bb2a350c4b32813fed

  • SSDEEP

    12288:UzarulTjM9OPo0VdfG1mIn0sSelRnlUZrHQ7l9pnhTOgcDiIXbJJvHT:UzaKTjzJH6m0hl9lUtw7l9pcq6JvHT

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      d1afb8abbb2c849aefe1287e24beabbf_JaffaCakes118

    • Size

      804KB

    • MD5

      d1afb8abbb2c849aefe1287e24beabbf

    • SHA1

      548e28251e61b930f2a4708fb2cb3ae0d015f468

    • SHA256

      53b65ed186c601fcea4cbc95c701b1922bf1389df1dcb1245006c4aac1c802df

    • SHA512

      c564b4f2f19c90d4b2a9ba59e39425726da8d969b16f810227d93774bdf2c57630b52ad32c9ce4234038828ab8cf6f607ed9e8ac87de54bb2a350c4b32813fed

    • SSDEEP

      12288:UzarulTjM9OPo0VdfG1mIn0sSelRnlUZrHQ7l9pnhTOgcDiIXbJJvHT:UzaKTjzJH6m0hl9lUtw7l9pcq6JvHT

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks