Overview

overview

10

Static

static

3

01aae1ce8f...18.exe

windows7-x64

10

01aae1ce8f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01aae1ce8fa49c1b461a34e6f22cd22a_JaffaCakes118

  • Size

    303KB

  • Sample

    240930-q6h53asgla

  • MD5

    01aae1ce8fa49c1b461a34e6f22cd22a

  • SHA1

    2cac399e9ebfabb687237d01d226043296d8f68b

  • SHA256

    e220e0449e1580632bdc4c8fb9130954ff12dbcff6b5823b6d6fb07a91891747

  • SHA512

    4bd24b329eb485fa30cf1499ff4d75a5c85849b608ae2d88750516a1ab3fab56af43d29faf1d73f2c760ebdc522526e272d70bc30687d294eba2670ab2172a33

  • SSDEEP

    6144:zd18jZ7rvaU3+mWrTanioSWX/zDeOA793idJlxiKsv3VmrkPpzAQB:beFzFznioSWLDeOCCxiKsNmwtt

Score
10/10
modiloaderdiscoveryevasiontrojanupx

Malware Config

Targets

    • Target

      01aae1ce8fa49c1b461a34e6f22cd22a_JaffaCakes118

    • Size

      303KB

    • MD5

      01aae1ce8fa49c1b461a34e6f22cd22a

    • SHA1

      2cac399e9ebfabb687237d01d226043296d8f68b

    • SHA256

      e220e0449e1580632bdc4c8fb9130954ff12dbcff6b5823b6d6fb07a91891747

    • SHA512

      4bd24b329eb485fa30cf1499ff4d75a5c85849b608ae2d88750516a1ab3fab56af43d29faf1d73f2c760ebdc522526e272d70bc30687d294eba2670ab2172a33

    • SSDEEP

      6144:zd18jZ7rvaU3+mWrTanioSWX/zDeOA793idJlxiKsv3VmrkPpzAQB:beFzFznioSWLDeOCCxiKsNmwtt

    Score
    10/10
    modiloaderdiscoveryevasiontrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks