Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
17-09-2024 22:58
General
-
Target
e7dc5dccfec6a4cb0a75c42818a37545_JaffaCakes118.exe
-
Size
60KB
-
MD5
e7dc5dccfec6a4cb0a75c42818a37545
-
SHA1
eef8fb7dcd9c115c4546972b8ebdac22c3b20a30
-
SHA256
9124ee97ba6ada329ec1d6320e3370249b1540e9ea9a15b2e4369611cfab0503
-
SHA512
220c28d6dd51f500165e33cda52758d811c49bd564b3f3e148fa394e310a0326b220815ae14ee79a9c9653aa7b698e0185e87da3a71bb257946f74df33135fd7
-
SSDEEP
1536:nhnDKhtstFhr8pBSd6XyzVDjINuUFsFq:nIhtstFhQpB86jNuo
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7dc5dccfec6a4cb0a75c42818a37545_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e7dc5dccfec6a4cb0a75c42818a37545_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
88KB