Overview

overview

10

Static

static

5

0869036cfb...18.exe

windows7-x64

10

0869036cfb...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0869036cfb1eb9e4a9446a8e1f9986ea_JaffaCakes118

  • Size

    108KB

  • Sample

    241002-crbksawcng

  • MD5

    0869036cfb1eb9e4a9446a8e1f9986ea

  • SHA1

    d9736ea7ae1b6b51f591f22702e994f5f283f9d3

  • SHA256

    1dca0e96d3e44180a8faadc5c73be82ff0ac7968e76255e00d9194cdc2463c49

  • SHA512

    483add7089a928340102e19110172fd89f0a85073981164f4612978d0ae3a2ad9aeca7001610581ba46a8a1c44fe30cc17b790c1c0d19441cd6bed0cbc745b55

  • SSDEEP

    3072:AeovXPoYcswp7Uclw3BwQaq9NUiuvH3ehout:fovQYjwpU8OB3aq7avXehoS

Score
10/10
modiloaderdiscoveryevasiontrojanupx

Malware Config

Targets

    • Target

      0869036cfb1eb9e4a9446a8e1f9986ea_JaffaCakes118

    • Size

      108KB

    • MD5

      0869036cfb1eb9e4a9446a8e1f9986ea

    • SHA1

      d9736ea7ae1b6b51f591f22702e994f5f283f9d3

    • SHA256

      1dca0e96d3e44180a8faadc5c73be82ff0ac7968e76255e00d9194cdc2463c49

    • SHA512

      483add7089a928340102e19110172fd89f0a85073981164f4612978d0ae3a2ad9aeca7001610581ba46a8a1c44fe30cc17b790c1c0d19441cd6bed0cbc745b55

    • SSDEEP

      3072:AeovXPoYcswp7Uclw3BwQaq9NUiuvH3ehout:fovQYjwpU8OB3aq7avXehoS

    Score
    10/10
    modiloaderdiscoveryevasiontrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks