Overview

overview

10

Static

static

3

da63c2a48b...18.exe

windows7-x64

10

da63c2a48b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da63c2a48b29f1abbd5883147cf18c33_JaffaCakes118

  • Size

    5.3MB

  • Sample

    241209-tcesbssqcv

  • MD5

    da63c2a48b29f1abbd5883147cf18c33

  • SHA1

    1be624a7d3bd597f229e260da63e4727552603cf

  • SHA256

    f94509b097bcfddf0c9311eb66b85792334e8a002a51c6e86cda854d070f4918

  • SHA512

    84b341a58d523b49868dbbc08643a6b2a7381fe0d40008bbaa583d4dff365c3f436e07ab4930416d188014c2c7b44b2b9f95d8d33f92867f242371889c677caf

  • SSDEEP

    49152:JPFeAAMxjzpSpI77f+79ZLGGTuq31tkm1FNLMCcONyXlZ8N:BFevmPko7fKXLGcbCmZnzNyXT8N

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      da63c2a48b29f1abbd5883147cf18c33_JaffaCakes118

    • Size

      5.3MB

    • MD5

      da63c2a48b29f1abbd5883147cf18c33

    • SHA1

      1be624a7d3bd597f229e260da63e4727552603cf

    • SHA256

      f94509b097bcfddf0c9311eb66b85792334e8a002a51c6e86cda854d070f4918

    • SHA512

      84b341a58d523b49868dbbc08643a6b2a7381fe0d40008bbaa583d4dff365c3f436e07ab4930416d188014c2c7b44b2b9f95d8d33f92867f242371889c677caf

    • SSDEEP

      49152:JPFeAAMxjzpSpI77f+79ZLGGTuq31tkm1FNLMCcONyXlZ8N:BFevmPko7fKXLGcbCmZnzNyXT8N

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks