Analysis

  • max time kernel
    141s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    26-11-2024 03:36

General

  • Target

    9f9b6422120c3335fb8cd24a217876de_JaffaCakes118.exe

  • Size

    651KB

  • MD5

    9f9b6422120c3335fb8cd24a217876de

  • SHA1

    3c624481e86ef2e0e16d3d2b0d4c3c3dabd53e07

  • SHA256

    d6847cb6c84b456f73e7fd76e0538f34ef0e5c0259f65bdec5bedd21ccfacc12

  • SHA512

    e0301d5fe8a9fef4973c69366878858d20d5c162fe481a4bd724affd37edd3e92079926509ba27f6d430fa0ed56ff3f9fd4006773d5255b8b32c8382b86e225a

  • SSDEEP

    12288:kpyZT1rrCxu/mDwLRI6BxcDqp9aqCcajVuD3Z7BPQGMWYur0s0D:kUx1rjOD3SxcDDcNDqWYurL0

Score
10/10

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

  • Modiloader family
  • ModiLoader Second Stage 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9f9b6422120c3335fb8cd24a217876de_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9f9b6422120c3335fb8cd24a217876de_JaffaCakes118.exe"
    1⤵
      PID:2432

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2432-0-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-1-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-2-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-3-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-4-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-5-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-6-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-7-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-8-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-9-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-10-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-11-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-12-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB

    • memory/2432-13-0x0000000000400000-0x000000000041C000-memory.dmp

      Filesize

      112KB