Overview

overview

10

Static

static

3

eabdfec560...18.exe

windows7-x64

10

eabdfec560...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eabdfec5608a054dd845ac8593482ea7_JaffaCakes118

  • Size

    334KB

  • Sample

    240919-gz4zhsvdnp

  • MD5

    eabdfec5608a054dd845ac8593482ea7

  • SHA1

    451bb13c863436149620a0e1923fc1a7274d7002

  • SHA256

    14af8c4ffd7b3bd1ec0d85de0f5fc3a3cee9f9509be330474aa0635d47454e56

  • SHA512

    2683009b85f4f76915c08caa477acc749f15b996aa43f0e2daeddaf883b30b7db5de18001b366f49561d00230042b9a2d30b84b9f7fe3ff8f29ae9dc3b7593de

  • SSDEEP

    6144:/Hq1Dtv04ftxaaiM84VGrJ52Gm1O+zxM4AD7Bltp3YRfD:v2UmVsY5HO4ALQ5

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      eabdfec5608a054dd845ac8593482ea7_JaffaCakes118

    • Size

      334KB

    • MD5

      eabdfec5608a054dd845ac8593482ea7

    • SHA1

      451bb13c863436149620a0e1923fc1a7274d7002

    • SHA256

      14af8c4ffd7b3bd1ec0d85de0f5fc3a3cee9f9509be330474aa0635d47454e56

    • SHA512

      2683009b85f4f76915c08caa477acc749f15b996aa43f0e2daeddaf883b30b7db5de18001b366f49561d00230042b9a2d30b84b9f7fe3ff8f29ae9dc3b7593de

    • SSDEEP

      6144:/Hq1Dtv04ftxaaiM84VGrJ52Gm1O+zxM4AD7Bltp3YRfD:v2UmVsY5HO4ALQ5

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks