General
- Target JaffaCakes118_4c3ca5ffc98faf804206bfc3bb3dd29e
- Size 130KB
- Sample250101-jadgda1mel
- SHA256 b5e8f26d15ba23a11fca0acb7ecd4f006d0a37d7cd65339ed7719aeefdb95301
Score
10/10
Malware Config
Targets
-
- Target JaffaCakes118_4c3ca5ffc98faf804206bfc3bb3dd29e
- Size 130KB
- SHA256 b5e8f26d15ba23a11fca0acb7ecd4f006d0a37d7cd65339ed7719aeefdb95301
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
UAC bypass
-
ModiLoader Second Stage
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2