Analysis
-
max time kernel
95s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
23-09-2024 15:53
General
-
Target
f29ae89be68e361b71469b707efd9d38_JaffaCakes118.exe
-
Size
119KB
-
MD5
f29ae89be68e361b71469b707efd9d38
-
SHA1
581b53f09963e632654098d668dd8e8aa90afa45
-
SHA256
8fd13c7943f86254e8dcc432bcf55ce31caa02b449139d86b9eba426cc1f1b15
-
SHA512
fddab01a9f6f403ee6396994a52251abee4755a8756a7d9a15ca16f495ee791b8854557328ff785ba256810115a31d764f7c9a6ba019ca4da4b440e9cd0e2756
-
SSDEEP
1536://E51ROqWvpyB8/2qY7tlK0UIOPryCsQ/Mycn+lv0TTh283/R0IYHXo:g1ROqWRmqYsDyCh/MyqljPR0dH4
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f29ae89be68e361b71469b707efd9d38_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f29ae89be68e361b71469b707efd9d38_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB