Overview

overview

10

Static

static

3

d494978a1b...18.exe

windows7-x64

10

d494978a1b...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 14:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d494978a1b1079afbdc74ed459c9a42b_JaffaCakes118.exe

  • Size

    24KB

  • MD5

    d494978a1b1079afbdc74ed459c9a42b

  • SHA1

    985b8287b35b269342565e456ab21284ba294f6a

  • SHA256

    e9725526d3634575800e09edc9ea7268131fe27cb4dcddf24d3fa529b4316e10

  • SHA512

    8c4fa01433a01cced0e9f20937c8c38c384223b4a5818aae814515633aa120aae82d402356fee6d21b29d86c4000763206ef00eb85ba9aa299db18dd2f7b87ee

  • SSDEEP

    768:YpFHSL9bKzpLuCbkAGAEd2HtJpLWab9cUpo3Jj9HN:YpFHSBWNaCbkA0+TDJcf3JpHN

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d494978a1b1079afbdc74ed459c9a42b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d494978a1b1079afbdc74ed459c9a42b_JaffaCakes118.exe"
    1⤵
      PID:2216

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2216-0-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

      Download