Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15-12-2024 11:15
General
-
Target
f3be1ddce74a3901b6b53c1966920a11_JaffaCakes118.exe
-
Size
703KB
-
MD5
f3be1ddce74a3901b6b53c1966920a11
-
SHA1
51f0b4768ac36ce9b13673113115e3980f702ad3
-
SHA256
36eadbf744dce8e262ee15292a0d1d588cd7fd8da7a7060e9a32d236e5586697
-
SHA512
473d728e7210a3d71f296735fd88fa94f471201e16993f7ff2bc5bac6e6276a7b69426e67e1a57250e1bff9c57a4536f06df5217308a879e68e7897926005e90
-
SSDEEP
12288:TD6xl/sN2wyUP1cAU7oHBqWA9U1eKsQ7W5QBe1dM6i9VBX9wORpzGIPUAB:TMRWyUP1cAU7MNwUQhQ7W5QBeY64VBXj
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 14 IoCs
-
Drops file in Windows directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3be1ddce74a3901b6b53c1966920a11_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f3be1ddce74a3901b6b53c1966920a11_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12B
MD5d9074f5716139796ec1a489700f865a0
SHA1a283d7798390c16668e05a12aec35e29cf7e8f9f
SHA256012f568377e78dac0d32cb941b53c0156a6837a275e2fa70ad0b573f0f53ebe2
SHA5126fdae455e3ef8d550686e1952a0538e4abf031c2fb92281f55b7fe2bb689a9611d3888766f7155729fbecaf0af2e6f998b6db74cfd02e1d4609f8b86c32997c9
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
4KB
-
Filesize
732KB
-
Filesize
4KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB