Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-11-2024 13:53

General

  • Target

    85c76ec294956e51d4f510c83d890635_JaffaCakes118.exe

  • Size

    956KB

  • MD5

    85c76ec294956e51d4f510c83d890635

  • SHA1

    c65ed5ed57cb178c4fbe9d8e341c9cf3247f1ba7

  • SHA256

    db130e162bcb1ff50517d22a4fe26a28f44c64cfe221dc9ca97c07621c2cb83f

  • SHA512

    7282fcda2cb82e97431e3b1093d7b14ec7b153a03522ffb178530e362d2d2bdb2a6289f19504e545c0825832c100c9b2c75b2b196828e557f34fdc7229962bc7

  • SSDEEP

    12288:FmDJlFX9vMFY3oCzb5TKbMW+Ibgu/zNBXcSF3Z4mxxTDqVTVOCtWmNHi8b0Z1WUO:8vFX9kcvRKfgu/wSQmX6VTzt5Jx/5HWQ

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

  • Modiloader family
  • ModiLoader Second Stage 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\85c76ec294956e51d4f510c83d890635_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\85c76ec294956e51d4f510c83d890635_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2344-0-0x0000000000400000-0x000000000050F000-memory.dmp

    Filesize

    1.1MB

  • memory/2344-1-0x00000000021D0000-0x0000000002224000-memory.dmp

    Filesize

    336KB

  • memory/2344-51-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-85-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-84-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-83-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-82-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-81-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-80-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-79-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-78-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-77-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-76-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-75-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-74-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-73-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-72-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-71-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-70-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-69-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-68-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-67-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-66-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-65-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-64-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-63-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-62-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-61-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-60-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-59-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-58-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-57-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-56-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-55-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-54-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-53-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-52-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-50-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-49-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-48-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-47-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-46-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-45-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-44-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-43-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-42-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-41-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-40-0x0000000002490000-0x0000000002491000-memory.dmp

    Filesize

    4KB

  • memory/2344-39-0x0000000002430000-0x0000000002431000-memory.dmp

    Filesize

    4KB

  • memory/2344-38-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/2344-37-0x0000000002460000-0x0000000002461000-memory.dmp

    Filesize

    4KB

  • memory/2344-36-0x0000000002480000-0x0000000002481000-memory.dmp

    Filesize

    4KB

  • memory/2344-35-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-34-0x0000000002290000-0x0000000002291000-memory.dmp

    Filesize

    4KB

  • memory/2344-33-0x0000000002410000-0x0000000002411000-memory.dmp

    Filesize

    4KB

  • memory/2344-32-0x00000000023E0000-0x00000000023E1000-memory.dmp

    Filesize

    4KB

  • memory/2344-31-0x00000000023F0000-0x00000000023F1000-memory.dmp

    Filesize

    4KB

  • memory/2344-30-0x0000000002270000-0x0000000002271000-memory.dmp

    Filesize

    4KB

  • memory/2344-29-0x0000000002280000-0x0000000002281000-memory.dmp

    Filesize

    4KB

  • memory/2344-28-0x0000000002400000-0x0000000002401000-memory.dmp

    Filesize

    4KB

  • memory/2344-27-0x00000000023B0000-0x00000000023B1000-memory.dmp

    Filesize

    4KB

  • memory/2344-26-0x00000000023D0000-0x00000000023D1000-memory.dmp

    Filesize

    4KB

  • memory/2344-25-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-24-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-23-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-22-0x0000000003370000-0x0000000003371000-memory.dmp

    Filesize

    4KB

  • memory/2344-21-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-20-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-19-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-18-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-17-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-16-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-15-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-14-0x0000000002250000-0x0000000002251000-memory.dmp

    Filesize

    4KB

  • memory/2344-13-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-12-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-11-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-10-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-9-0x0000000003380000-0x0000000003381000-memory.dmp

    Filesize

    4KB

  • memory/2344-8-0x0000000000A10000-0x0000000000A11000-memory.dmp

    Filesize

    4KB

  • memory/2344-7-0x0000000002230000-0x0000000002231000-memory.dmp

    Filesize

    4KB

  • memory/2344-6-0x00000000009B0000-0x00000000009B1000-memory.dmp

    Filesize

    4KB

  • memory/2344-5-0x00000000009C0000-0x00000000009C1000-memory.dmp

    Filesize

    4KB

  • memory/2344-4-0x0000000002240000-0x0000000002241000-memory.dmp

    Filesize

    4KB

  • memory/2344-3-0x00000000009E0000-0x00000000009E1000-memory.dmp

    Filesize

    4KB

  • memory/2344-2-0x0000000000A00000-0x0000000000A01000-memory.dmp

    Filesize

    4KB

  • memory/2344-86-0x0000000000400000-0x000000000050F000-memory.dmp

    Filesize

    1.1MB

  • memory/2344-87-0x00000000021D0000-0x0000000002224000-memory.dmp

    Filesize

    336KB