Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25-09-2024 16:40
General
-
Target
f66d9b0a3a3b431cba3c9921e5f802f7_JaffaCakes118.exe
-
Size
2.6MB
-
MD5
f66d9b0a3a3b431cba3c9921e5f802f7
-
SHA1
1438f2c2f6fbe3810e3e4c31dcb59adc8097d505
-
SHA256
17a3aa16f489f9fd8ac11b96972eb8acd4763680548ca8b2d3a835bb52815671
-
SHA512
7fefebbb5b08f71f7d11ca8e83cc22cb01cda7954073a5eab663f443eac14d055bb22978a0845d1ced2ebfc21bc55448381682b470638cb5a06581d870555a78
-
SSDEEP
49152:GTZ6cvho0oLyjvVRQfRyMy9A0GBXMwc//////MDw8cbk67J3ZdTxvDQ4+c/////I:GTZ6aoLybVCfRTMwc//////qw8cbk676
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f66d9b0a3a3b431cba3c9921e5f802f7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f66d9b0a3a3b431cba3c9921e5f802f7_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
319B
MD580d1fa2f7c20a2c847d33af2e3c42da1
SHA1986d24eb845d248de95d2dbf202d04a3810e1bb0
SHA256650cac313f3d08f93c43ccdde9e600b62c4d3c0ff553d09cec60cc757e3b4422
SHA51238dcca74cd0e0d3a36c12eae090f4fe7319502000f5bbce16e19e9931493f9c8ac6d8fb800c6d4e4ff8681ce9c89f56e578909342b06a0381df1d33669189dd7
-
Filesize
489B
MD54a874ea3b2b8fe5f7da19844c2cbf013
SHA19a45708222684b505c6fd99c6b1ec345dda54746
SHA256014a9aa3970469f4df8506cb16b64e3a42eb093295880121d88bd28b9017d64e
SHA512d416177d78967a0c6cdc26e50e8d19ec08ab7c6b6d1b70668bfd9ee0989ac530bc3ebbbbcbb3249fa0df07900d1fafe1e1fbee656e53c991a83a36dd87fa33d9
-
Filesize
130B
MD5c02def8b804b649f797cda6129fc766b
SHA1d7744986f38420198fd82c039da85454496eacd9
SHA25675e35517647d2046508d656e0479935f7da0376fe819781ac84264904d6734f4
SHA512d65e2b20747a362984f79adddd66b58f6ef35d8b6ae7f0b63c66d0b8af51fd7c9ae94143b4c38222df2d4bf913147e9d06e5cca8d46abf66278411916a9ad36d
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.7MB