Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-09-2024 15:16
General
-
Target
f012f3173e2ee7c2d12ec0dc15f5a360_JaffaCakes118.exe
-
Size
686KB
-
MD5
f012f3173e2ee7c2d12ec0dc15f5a360
-
SHA1
46c43ec5b2d067eef8cef07843824f2a8679f140
-
SHA256
789c5b51a4c5b4ff4c12f30d62ecc962914747d00a38a26f5a499d002ad023d7
-
SHA512
cdccb791713d573a3e154df33edcb05790dfc9923b83a29e2964993453a788b271ccdf3afdda45dd84d12c368481f1a68184d7ab2e2aa0d7853b92c89527517d
-
SSDEEP
12288:D7/CzPyBwCECARz+edDIg32qyIOyo+1tAGiKSGiGAOLpeXolcYW+lo:n6r2TszDf2qy5yo+1tZMEAOLDlcu
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 15 IoCs
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 16 IoCs
Detects Themida, an advanced Windows software protection system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f012f3173e2ee7c2d12ec0dc15f5a360_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f012f3173e2ee7c2d12ec0dc15f5a360_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB