Overview

overview

10

Static

static

3

fba8b66770...18.exe

windows7-x64

10

fba8b66770...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fba8b6677080524b6d91b6952796c192_JaffaCakes118

  • Size

    1.3MB

  • Sample

    241218-qcmw6a1nbp

  • MD5

    fba8b6677080524b6d91b6952796c192

  • SHA1

    3bc41081afa756aeeeaee116ac23ae5b2c324ecf

  • SHA256

    c0b0c22f1ebf5f70abbe780d34986a4361b691e5a13e64bf4bdacf7eaed2bcd8

  • SHA512

    0d5186cb2a9acce77026fb522469f9cc6ac4557d0552f261504b73db97fe47d80abe719494af17decab1f4728fc26961d0b0bc3217748c830f9fc8613381db55

  • SSDEEP

    24576:xw2B++C50vlq+fAEY4Q3t0t3DCTT8VhgGXIA1j4NErURv4:xs50t1FbTCTT4ZXP6iQRv

Score
10/10
modiloaderdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      fba8b6677080524b6d91b6952796c192_JaffaCakes118

    • Size

      1.3MB

    • MD5

      fba8b6677080524b6d91b6952796c192

    • SHA1

      3bc41081afa756aeeeaee116ac23ae5b2c324ecf

    • SHA256

      c0b0c22f1ebf5f70abbe780d34986a4361b691e5a13e64bf4bdacf7eaed2bcd8

    • SHA512

      0d5186cb2a9acce77026fb522469f9cc6ac4557d0552f261504b73db97fe47d80abe719494af17decab1f4728fc26961d0b0bc3217748c830f9fc8613381db55

    • SSDEEP

      24576:xw2B++C50vlq+fAEY4Q3t0t3DCTT8VhgGXIA1j4NErURv4:xs50t1FbTCTT4ZXP6iQRv

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks