Overview

overview

10

Static

static

10

ff43b396af...18.exe

windows7-x64

10

ff43b396af...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff43b396af235bfeef6dbee74fdacd7e_JaffaCakes118

  • Size

    313KB

  • Sample

    240929-y3rxssycqr

  • MD5

    ff43b396af235bfeef6dbee74fdacd7e

  • SHA1

    f2f8069f8cbe29da1734fb26ffa4cc6bd63b65f1

  • SHA256

    98e02ed7ade12e35e3656a2fdf53c0c797dd17fa8cf1d6dd1de1af024479d5d3

  • SHA512

    c90dbaf195255097e4225d09db0697014cd2291f98993b2fc411fb3d585833ec7e0be252ce254f738bb80ad47909389bea8a74d53cbce70c1d3070698d7c568a

  • SSDEEP

    6144:mG377xS2Vp2CeiorXhwTBN53nppcCJJvHPPoS:Fr7xS2Vp6FwT3bJJvHXoS

Score
10/10
modiloaderdiscoveryevasionpersistencetrojanupx

Malware Config

Targets

    • Target

      ff43b396af235bfeef6dbee74fdacd7e_JaffaCakes118

    • Size

      313KB

    • MD5

      ff43b396af235bfeef6dbee74fdacd7e

    • SHA1

      f2f8069f8cbe29da1734fb26ffa4cc6bd63b65f1

    • SHA256

      98e02ed7ade12e35e3656a2fdf53c0c797dd17fa8cf1d6dd1de1af024479d5d3

    • SHA512

      c90dbaf195255097e4225d09db0697014cd2291f98993b2fc411fb3d585833ec7e0be252ce254f738bb80ad47909389bea8a74d53cbce70c1d3070698d7c568a

    • SSDEEP

      6144:mG377xS2Vp2CeiorXhwTBN53nppcCJJvHPPoS:Fr7xS2Vp6FwT3bJJvHXoS

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks