Overview

overview

10

Static

static

5

JaffaCakes...36.exe

windows7-x64

5

JaffaCakes...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4a7127e00da464e1f16af88a41c53536

  • Size

    174KB

  • Sample

    250101-g6ecfazlfj

  • MD5

    4a7127e00da464e1f16af88a41c53536

  • SHA1

    3d42af9bd3a79da53277623f7d376a4672ae6c58

  • SHA256

    85e1cb35b50db34959564ea43f5e06726e897b72d80029789e3479e643b4f2e6

  • SHA512

    4a789ee4542afeff20ba49f1a39eaad95c2278bffdf723fc29e297dfade90c4901150afc0420a46dd6c8850028366727844513d92c36b27589c40c6f10e345c2

  • SSDEEP

    3072:+oy8j7VnNdrPHaSekwi+mWdEv1Nout+9DbmpU91QMiiOJ+mE7rruqhSOS:e8jZ7rvaU3+mWd0NoSauUzCiOvyrxSOS

Score
10/10
modiloaderdiscoveryevasiontrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_4a7127e00da464e1f16af88a41c53536

    • Size

      174KB

    • MD5

      4a7127e00da464e1f16af88a41c53536

    • SHA1

      3d42af9bd3a79da53277623f7d376a4672ae6c58

    • SHA256

      85e1cb35b50db34959564ea43f5e06726e897b72d80029789e3479e643b4f2e6

    • SHA512

      4a789ee4542afeff20ba49f1a39eaad95c2278bffdf723fc29e297dfade90c4901150afc0420a46dd6c8850028366727844513d92c36b27589c40c6f10e345c2

    • SSDEEP

      3072:+oy8j7VnNdrPHaSekwi+mWdEv1Nout+9DbmpU91QMiiOJ+mE7rruqhSOS:e8jZ7rvaU3+mWd0NoSauUzCiOvyrxSOS

    Score
    10/10
    discoveryupxmodiloaderevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Checks whether UAC is enabled

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks