Analysis
-
max time kernel
118s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
31-10-2024 23:07
General
-
Target
83bd27da78d661b739f5ab8e2ca2465b_JaffaCakes118.exe
-
Size
152KB
-
MD5
83bd27da78d661b739f5ab8e2ca2465b
-
SHA1
dff59f206c6e0fbcf2e3ee6deb1061bfecd3b5f0
-
SHA256
12d9a59e9a2acadb3bc184725b47cc1a3325d5d7c1056d5fdbd994db10e1ab4b
-
SHA512
20af277234bb6f4d8c66383b81a7e9f1e452750e3a85d6851400cf0e6a4d46a05a5cc5afa0c51a00051822dd785389bb2fab5186b185b606807ac2cbfe319b75
-
SSDEEP
1536:i7QqYYQVr2RX5dd2QspKSD7ACrfndzSdtW2VZMkXGn8XcUxeZEK8UxVRE:XY4r2Rfd8YpcdzwLVZMxecUxeZEKRxs
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\83bd27da78d661b739f5ab8e2ca2465b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\83bd27da78d661b739f5ab8e2ca2465b_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25KB
MD5d71ca5c5c6a3caddf46fa0f151c35285
SHA1fda53596920194e8de0ae6c39a6619fd82c50264
SHA256cee236c201ff2e38a172198a3656d11143fbe8a15dab185d65338076370745c8
SHA512b19f96468aa71ab27b00d37584dac4beaaaf0e1d213d09ecdc6a8858fba8474f6a1b92b1b12125dba55148fd864724e6ea5e26a82fbf38111369c67a361ee116
-
Filesize
4KB
-
Filesize
124KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
4KB