Overview

overview

10

Static

static

3

ec5c6c5cce...18.exe

windows7-x64

10

ec5c6c5cce...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec5c6c5ccec12857f59f7b19272538c5_JaffaCakes118

  • Size

    142KB

  • Sample

    240919-226lcawejm

  • MD5

    ec5c6c5ccec12857f59f7b19272538c5

  • SHA1

    acd5d283a0687538a5283c11ab65020fb3fdfa44

  • SHA256

    00b80a84f335d090efa2b5712d1a07d25a027c0c4790a767aec0f413c249e17d

  • SHA512

    cf74a8eadba3e5e9f2b7d04abb362e57013f88e63aa817217aa9112fa96c53062457d577ff79c0b65f4be57c6790e03af30e2f6aaea047b4196338ab11260c10

  • SSDEEP

    3072:na7yXlM20GJSJ5EbQDjmT/GrHEi2ooRHtvQfOt8nT057Ysj5N+EfAj:nuyJ0yS35jk/CXvQ5d8nw57YsVfAj

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      ec5c6c5ccec12857f59f7b19272538c5_JaffaCakes118

    • Size

      142KB

    • MD5

      ec5c6c5ccec12857f59f7b19272538c5

    • SHA1

      acd5d283a0687538a5283c11ab65020fb3fdfa44

    • SHA256

      00b80a84f335d090efa2b5712d1a07d25a027c0c4790a767aec0f413c249e17d

    • SHA512

      cf74a8eadba3e5e9f2b7d04abb362e57013f88e63aa817217aa9112fa96c53062457d577ff79c0b65f4be57c6790e03af30e2f6aaea047b4196338ab11260c10

    • SSDEEP

      3072:na7yXlM20GJSJ5EbQDjmT/GrHEi2ooRHtvQfOt8nT057Ysj5N+EfAj:nuyJ0yS35jk/CXvQ5d8nw57YsVfAj

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks