Overview

overview

10

Static

static

10

f64d485ead...18.exe

windows7-x64

10

f64d485ead...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f64d485ead3fde5258a7687ecf93e7d7_JaffaCakes118

  • Size

    273KB

  • Sample

    240925-ssnjqssfjr

  • MD5

    f64d485ead3fde5258a7687ecf93e7d7

  • SHA1

    1458e29f12861851f60c5caaa9b1a144621db661

  • SHA256

    f52dbb42f751c368e06086f8137b64303444bc0355f4363c1fbef3c8234d1ace

  • SHA512

    5b7aace8ddbd6dd4f1fa37633218df2b7dc8a60010320b3282830f8c69095aeee4ed14fbc0481319ad47f50a08e258b949bb8a0e7cf51d465206609e3e5e0efc

  • SSDEEP

    6144:aG377xS2Vp2CeiorXhwTBOf0I53CBpcCJJvH:Jr7xS2Vp6FwTRjbJJvH

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      f64d485ead3fde5258a7687ecf93e7d7_JaffaCakes118

    • Size

      273KB

    • MD5

      f64d485ead3fde5258a7687ecf93e7d7

    • SHA1

      1458e29f12861851f60c5caaa9b1a144621db661

    • SHA256

      f52dbb42f751c368e06086f8137b64303444bc0355f4363c1fbef3c8234d1ace

    • SHA512

      5b7aace8ddbd6dd4f1fa37633218df2b7dc8a60010320b3282830f8c69095aeee4ed14fbc0481319ad47f50a08e258b949bb8a0e7cf51d465206609e3e5e0efc

    • SSDEEP

      6144:aG377xS2Vp2CeiorXhwTBOf0I53CBpcCJJvH:Jr7xS2Vp6FwTRjbJJvH

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks