Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18-09-2024 15:26
General
-
Target
e96b92b363658ab7c16a07aba6298c4c_JaffaCakes118.exe
-
Size
348KB
-
MD5
e96b92b363658ab7c16a07aba6298c4c
-
SHA1
ec410ea4d41d5fea0dce3e3e5839e013b50c3b9b
-
SHA256
5dd29aac69c52b250629d01337879454d26c3d4a3e68a25756bb5e577da3213d
-
SHA512
0b343ea90bf70b9bb9cdef949815d9b02cab42e93090916f6690fbeac4dc31ea1c9cdaa769cdc9a0e92653a4881738d283629e8d043203a35aa3cb4954238b96
-
SSDEEP
6144:1EKZ6ck4ZE6fYoZ/Qng9er4RAAFybopJRhHp3PX+jmL3gP9YWqP0fGzvh1:PZ6cZfYoebrkQoP31PAmL3eDq8fGzvP
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e96b92b363658ab7c16a07aba6298c4c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e96b92b363658ab7c16a07aba6298c4c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.5MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB