Overview

overview

10

Static

static

7

d5b5b42529...18.exe

windows7-x64

10

d5b5b42529...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5b5b4252954a8eca0c7ab4ac7d9ce4e_JaffaCakes118

  • Size

    119KB

  • Sample

    240909-fylwwawcmf

  • MD5

    d5b5b4252954a8eca0c7ab4ac7d9ce4e

  • SHA1

    379d1e6032a7479066652ef3832b05939051a489

  • SHA256

    217f2b13cc66e1a45c4e89a4c512157253441472526e5f80f199bd2bed9442ff

  • SHA512

    0fb12cada704cdebf1e74cf21fea98e04db9a64586fe9f21c721f1c815669e5102571695c1b8b7bc7f6f858ecf4b323a44a8f656b028e5b4110ee41be42e2137

  • SSDEEP

    3072:VzYW1CsVy6Bq6E+5t+Fsq++KpccuRKjoGSr0M:F1CsQ6kbKWKy0

Score
10/10
modiloaderdiscoveryevasiontrojanupx

Malware Config

Targets

    • Target

      d5b5b4252954a8eca0c7ab4ac7d9ce4e_JaffaCakes118

    • Size

      119KB

    • MD5

      d5b5b4252954a8eca0c7ab4ac7d9ce4e

    • SHA1

      379d1e6032a7479066652ef3832b05939051a489

    • SHA256

      217f2b13cc66e1a45c4e89a4c512157253441472526e5f80f199bd2bed9442ff

    • SHA512

      0fb12cada704cdebf1e74cf21fea98e04db9a64586fe9f21c721f1c815669e5102571695c1b8b7bc7f6f858ecf4b323a44a8f656b028e5b4110ee41be42e2137

    • SSDEEP

      3072:VzYW1CsVy6Bq6E+5t+Fsq++KpccuRKjoGSr0M:F1CsQ6kbKWKy0

    Score
    10/10
    modiloaderdiscoveryevasiontrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks