Overview

overview

10

Static

static

3

9321f538e9...18.exe

windows7-x64

10

9321f538e9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9321f538e9eb948403b4652a4f1cb553_JaffaCakes118

  • Size

    139KB

  • Sample

    241124-hl7zpaymfx

  • MD5

    9321f538e9eb948403b4652a4f1cb553

  • SHA1

    3bacc7b7ce9cec9decb798d5ea8534d8ebdacde6

  • SHA256

    e32f3bcb63d7f86b6e102c9277fe8d7be68750042a165388ad2dc11d5863bf8b

  • SHA512

    6aa47659a22af7ed3eee5376ab887bf5c58ac667d413cd7054d1f8e4c2435988b8d179212ac08f16280d45d114c2b442cd499e6dc52a169a10bc13da09abf464

  • SSDEEP

    3072:JJRsi49Y1VMGYIyRB/PBL22zK8aH5o/6sXgdsn4:JIY1B2pP52mVaZ269T

Score
10/10
modiloaderdiscoveryevasionpersistencetrojanupx

Malware Config

Targets

    • Target

      9321f538e9eb948403b4652a4f1cb553_JaffaCakes118

    • Size

      139KB

    • MD5

      9321f538e9eb948403b4652a4f1cb553

    • SHA1

      3bacc7b7ce9cec9decb798d5ea8534d8ebdacde6

    • SHA256

      e32f3bcb63d7f86b6e102c9277fe8d7be68750042a165388ad2dc11d5863bf8b

    • SHA512

      6aa47659a22af7ed3eee5376ab887bf5c58ac667d413cd7054d1f8e4c2435988b8d179212ac08f16280d45d114c2b442cd499e6dc52a169a10bc13da09abf464

    • SSDEEP

      3072:JJRsi49Y1VMGYIyRB/PBL22zK8aH5o/6sXgdsn4:JIY1B2pP52mVaZ269T

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks