Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
14-12-2024 13:28
General
-
Target
eefe16c1b7521283b746187d17879cae_JaffaCakes118.exe
-
Size
172KB
-
MD5
eefe16c1b7521283b746187d17879cae
-
SHA1
aff23e7a4019c6ce33467e09d061191fae00fed5
-
SHA256
4bb41907676400e1043908390203b76c1b3c05cf19ce6fb192b4409a702337b0
-
SHA512
6e12037eea69eeeaca727ddbe9c5779a9b6ddd468cfd16af6a834c66d046310a41e12b400cf50e7af05a2ab579a3accab465a3b288992bdfd27a46b1433c5e1f
-
SSDEEP
3072:KYLOvEm3zUDepyOonI+yDEmQ3wO21UFGr:Fw/07dn9IE33JoU4
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 3 IoCs
-
Loads dropped DLL 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eefe16c1b7521283b746187d17879cae_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eefe16c1b7521283b746187d17879cae_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
57KB
MD58ca08e5d1d8a87c095554e267eb12fbb
SHA1a25bc12faa9eef28dfb534d578361eaf99fe3ab7
SHA256f977408b07b5f33b34d8346b4b1ecc1c14ccf76a0296159c4be12ed309aafc78
SHA5125f283cb533501140cfd308e0a66a9dd0b6196e02b0feaf7f81999f224309950d10a8ce26363ac4e2a750a74c9546c4bbbdc32d77ff3101a92dad1a0120674520
-
Filesize
172KB
-
Filesize
172KB