Overview

overview

10

Static

static

7

f15c1e96f9...18.exe

windows7-x64

10

f15c1e96f9...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f15c1e96f902e16e171b14623835cf07_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240922-f3t32stdrk

  • MD5

    f15c1e96f902e16e171b14623835cf07

  • SHA1

    13be5000fd6e2f0accfb51372d65830c5dee454a

  • SHA256

    01fee8c117a98181f1308fc8cde7baeeb9e74975ae59d4c1208ae033d4f06818

  • SHA512

    5cc8e399bd7aa3c9989152c6e0a1a4e21476fa1a5e248f10c2285628fb9aac11084a82f32ba52e40922f3cc47cead02193d59fbbc7ef4ab993f212b051c0a317

  • SSDEEP

    24576:dsr2gVyCGDQJ4b4d51CwL0B+NwZokqrqvm13na2Waf/mbXbs3aEq:OJ/d5/gkNAokqr713nHWaf/mIaEq

Score
10/10
modiloaderdiscoveryevasionthemidatrojan

Malware Config

Targets

    • Target

      f15c1e96f902e16e171b14623835cf07_JaffaCakes118

    • Size

      1.3MB

    • MD5

      f15c1e96f902e16e171b14623835cf07

    • SHA1

      13be5000fd6e2f0accfb51372d65830c5dee454a

    • SHA256

      01fee8c117a98181f1308fc8cde7baeeb9e74975ae59d4c1208ae033d4f06818

    • SHA512

      5cc8e399bd7aa3c9989152c6e0a1a4e21476fa1a5e248f10c2285628fb9aac11084a82f32ba52e40922f3cc47cead02193d59fbbc7ef4ab993f212b051c0a317

    • SSDEEP

      24576:dsr2gVyCGDQJ4b4d51CwL0B+NwZokqrqvm13na2Waf/mbXbs3aEq:OJ/d5/gkNAokqr713nHWaf/mIaEq

    Score
    10/10
    modiloaderdiscoveryevasionthemidatrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks