Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
18-09-2024 12:12
General
-
Target
e9170018a589dd748c2d6126131aecd8_JaffaCakes118.exe
-
Size
345KB
-
MD5
e9170018a589dd748c2d6126131aecd8
-
SHA1
b41973f0acf036e0b81f6222dd3faa1bfeacef54
-
SHA256
9dd7f118a7014e5dfda1669d5cac2301eb7a972bceed9951be3fd318c0f24057
-
SHA512
69caf37f03b6f6d2d68642c72ae386890b75ebf3be555aa7bcf4b721b202fcf9bb8eda6a16517012571dc97a43e783738444c9d02dae5c591881c3f579988a43
-
SSDEEP
6144:iZFR2vBimE44gMn9KKUUJM/fo+9q2BrHgigT1BD7EOLw4FBwBsQ/lbLupQdp8cZe:i92Z34T9uUJM/wkLOT1B7EOLwcAscfab
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 5 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9170018a589dd748c2d6126131aecd8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e9170018a589dd748c2d6126131aecd8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB