Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04-11-2024 02:45
General
-
Target
8ec190e937f1461e4599311b9f1fa9ea_JaffaCakes118.exe
-
Size
216KB
-
MD5
8ec190e937f1461e4599311b9f1fa9ea
-
SHA1
f3dc8022083973c47c36f6b3c3a06de399057b3c
-
SHA256
d26ce98648a44b71360d0fb6bfe1c7289877cbfae3c7aaa1bf2de98fc11242ac
-
SHA512
8d2ef5697206779baadf20ee1d39f3f0b2f4afaa5569c0d36c83ff33ef51a26454df0f4d9ed5802e89760cb5d3517c628c5c637ad5f21d69277e7d1c80063188
-
SSDEEP
3072:aD3IV9j3b3O47Msf2Cp2GivcxwPnzEx6bM:aD3IVVVfv3gzEx6bM
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ec190e937f1461e4599311b9f1fa9ea_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8ec190e937f1461e4599311b9f1fa9ea_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21KB
MD56a6e3fdf3f5b93119cfb4b16c26b04e1
SHA1340b602025271a1727ff5dc490abb60473a40fe0
SHA256be1db7afa9791daf2bc344f598a31294af5adfbeee20c69c22ff8a944f648ddc
SHA51279592a5b59158e3bf167a4f547437509857c4e77be7e64df40bdabb70ba78b8a9533a05de94e476410ac7f95b2725795c5eba7251bd136354f33f3784432b031
-
Filesize
216KB
-
Filesize
144KB
-
Filesize
216KB
-
Filesize
144KB