Overview

overview

10

Static

static

3

b566b00276...18.exe

windows7-x64

10

b566b00276...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b566b00276be8b4b70f1a1bb40b601c8_JaffaCakes118

  • Size

    177KB

  • Sample

    241201-16f1tavjay

  • MD5

    b566b00276be8b4b70f1a1bb40b601c8

  • SHA1

    a92af7b3fdd7fb1dfea70cf7e2a7d75f716d201e

  • SHA256

    0dbee338a485d99b1e535e9492a676f7dbf6ffe3f6359e0840a41fcc8ef03b8a

  • SHA512

    7043e28c81315651c1feb031603d1180c2cf263fe837441dd1b1f5ea51e6a7655615569a3685c1140864cdf22656b4312dfde728e59cbf67188c73e5b7a6a787

  • SSDEEP

    3072:41q1+MJKrUnFYY5z1i0Nmbi5fJBNOfZiVwoutGxfsNQf8uNEp/3b0J0okI:VIrPj0NmWtNOfZ+woSGxLRNEpT2d

Score
10/10
modiloaderdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      b566b00276be8b4b70f1a1bb40b601c8_JaffaCakes118

    • Size

      177KB

    • MD5

      b566b00276be8b4b70f1a1bb40b601c8

    • SHA1

      a92af7b3fdd7fb1dfea70cf7e2a7d75f716d201e

    • SHA256

      0dbee338a485d99b1e535e9492a676f7dbf6ffe3f6359e0840a41fcc8ef03b8a

    • SHA512

      7043e28c81315651c1feb031603d1180c2cf263fe837441dd1b1f5ea51e6a7655615569a3685c1140864cdf22656b4312dfde728e59cbf67188c73e5b7a6a787

    • SSDEEP

      3072:41q1+MJKrUnFYY5z1i0Nmbi5fJBNOfZiVwoutGxfsNQf8uNEp/3b0J0okI:VIrPj0NmWtNOfZ+woSGxLRNEpT2d

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks