Overview

overview

10

Static

static

3

c8f43f0394...18.exe

windows7-x64

10

c8f43f0394...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8f43f03945d4acdb249b83d6d3fcd69_JaffaCakes118

  • Size

    132KB

  • Sample

    241205-xdvrqatjcp

  • MD5

    c8f43f03945d4acdb249b83d6d3fcd69

  • SHA1

    3f5f4a3757dcc930a035cbbb220249f2a98e5bb8

  • SHA256

    bc32a42d79f013887998f7da1c3039ea14d45dedd46c1a9656293e99af54fe5a

  • SHA512

    8208f487d757f868bd3409a9534119c88bd0d8938cdbe4b7642e4d7c2524598d7fd4d6ad09667bb0f1a333c5aafd25874da3174be514a792d4702a8b1156093e

  • SSDEEP

    3072:EUfrSzltkzP/1MS2RU4DvwOcY7ABfre2QglSvS332d:EqrSzSn1gU4Dr74enSGd

Score
10/10
modiloaderdiscoveryevasionpersistencetrojanupx

Malware Config

Targets

    • Target

      c8f43f03945d4acdb249b83d6d3fcd69_JaffaCakes118

    • Size

      132KB

    • MD5

      c8f43f03945d4acdb249b83d6d3fcd69

    • SHA1

      3f5f4a3757dcc930a035cbbb220249f2a98e5bb8

    • SHA256

      bc32a42d79f013887998f7da1c3039ea14d45dedd46c1a9656293e99af54fe5a

    • SHA512

      8208f487d757f868bd3409a9534119c88bd0d8938cdbe4b7642e4d7c2524598d7fd4d6ad09667bb0f1a333c5aafd25874da3174be514a792d4702a8b1156093e

    • SSDEEP

      3072:EUfrSzltkzP/1MS2RU4DvwOcY7ABfre2QglSvS332d:EqrSzSn1gU4Dr74enSGd

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks