Overview

overview

10

Static

static

7

e54c0e8588...18.exe

windows7-x64

10

e54c0e8588...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e54c0e8588af934fa8f9029f8aa95db9_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240916-wc4gss1dqa

  • MD5

    e54c0e8588af934fa8f9029f8aa95db9

  • SHA1

    9ea4e7ff2886a076377255e2de9c52a007d8517f

  • SHA256

    9552c05cb8f389f918169ba343ed8ee673678e559201e7c9e9c8d60367617635

  • SHA512

    bccdca42b602be964f63ac1da4ce1fb9b4904bcb4b801ff22c05543a55b664f9e2bea6929470f000ed26641c7356457711d2b2dbf7411c10a488f3572a07742b

  • SSDEEP

    49152:IgNXwsgb3SUpaEt4B3YvksfCuMk2TpRnEy:IgwsoSCNt4B3Yvl/D8

Score
10/10
modiloaderdiscoveryevasionthemidatrojan

Malware Config

Targets

    • Target

      e54c0e8588af934fa8f9029f8aa95db9_JaffaCakes118

    • Size

      2.1MB

    • MD5

      e54c0e8588af934fa8f9029f8aa95db9

    • SHA1

      9ea4e7ff2886a076377255e2de9c52a007d8517f

    • SHA256

      9552c05cb8f389f918169ba343ed8ee673678e559201e7c9e9c8d60367617635

    • SHA512

      bccdca42b602be964f63ac1da4ce1fb9b4904bcb4b801ff22c05543a55b664f9e2bea6929470f000ed26641c7356457711d2b2dbf7411c10a488f3572a07742b

    • SSDEEP

      49152:IgNXwsgb3SUpaEt4B3YvksfCuMk2TpRnEy:IgwsoSCNt4B3Yvl/D8

    Score
    10/10
    modiloaderdiscoveryevasionthemidatrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks