Overview

overview

10

Static

static

7

e77266a3c9...18.exe

windows7-x64

10

e77266a3c9...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e77266a3c9c743d7dbe0a2f3a92faf07_JaffaCakes118

  • Size

    1.3MB

  • Sample

    241212-vt9vga1ldz

  • MD5

    e77266a3c9c743d7dbe0a2f3a92faf07

  • SHA1

    e0c7e6d273bfcb99dac6d7913a9dcc5251efe715

  • SHA256

    e550b73b4a63ff4e5bde6ab410231ad0348603c8d81dd886b4e1c1cec02a1de6

  • SHA512

    7913ecf2426b2e4941202e66831b57b7d0923d3dce0a591ad56c5e2c6f6b3d8b7b5abca4b0feb036aeedec41ca47d189bd70f480c5c6c064e3f720553319d74f

  • SSDEEP

    24576:SZhMr1aoNt4tqnwkYZBFCUlFTjbbDIcEdnxf4m5FyOp/CPm:SZhUaUfnwkQLHfb0cmx4m7/paPm

Score
10/10
modiloaderdiscoveryevasionthemidatrojan

Malware Config

Targets

    • Target

      e77266a3c9c743d7dbe0a2f3a92faf07_JaffaCakes118

    • Size

      1.3MB

    • MD5

      e77266a3c9c743d7dbe0a2f3a92faf07

    • SHA1

      e0c7e6d273bfcb99dac6d7913a9dcc5251efe715

    • SHA256

      e550b73b4a63ff4e5bde6ab410231ad0348603c8d81dd886b4e1c1cec02a1de6

    • SHA512

      7913ecf2426b2e4941202e66831b57b7d0923d3dce0a591ad56c5e2c6f6b3d8b7b5abca4b0feb036aeedec41ca47d189bd70f480c5c6c064e3f720553319d74f

    • SSDEEP

      24576:SZhMr1aoNt4tqnwkYZBFCUlFTjbbDIcEdnxf4m5FyOp/CPm:SZhUaUfnwkQLHfb0cmx4m7/paPm

    Score
    10/10
    modiloaderdiscoveryevasionthemidatrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks