Overview

overview

10

Static

static

3

JaffaCakes...22.exe

windows7-x64

10

JaffaCakes...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_62e47b54734e7a9a05bffda45df00922

  • Size

    127KB

  • Sample

    250102-fzdlwsvqav

  • MD5

    62e47b54734e7a9a05bffda45df00922

  • SHA1

    6345bea5765762eeb2b10eecb37a3ac6f945ab45

  • SHA256

    ee9435588703e9945fa550b48a458c99720c8c3653c2b16e4a5c236965368456

  • SHA512

    41d876592132d3f8b3ead23681dba06b8cc0c67381cb5d1b2a199b7dbe785ff28d6998b41a3e4c913b9f24ed70154bad1d095482e7b18a8ea3bc332eafd1bba9

  • SSDEEP

    3072:T4uvYl5yjK8RNbFUpbtVmxoPodf4qGP21ouv4Miu:T4kYXylkVtVKM+kPYow4M

Score
10/10
modiloaderdiscoveryevasionpersistencetrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_62e47b54734e7a9a05bffda45df00922

    • Size

      127KB

    • MD5

      62e47b54734e7a9a05bffda45df00922

    • SHA1

      6345bea5765762eeb2b10eecb37a3ac6f945ab45

    • SHA256

      ee9435588703e9945fa550b48a458c99720c8c3653c2b16e4a5c236965368456

    • SHA512

      41d876592132d3f8b3ead23681dba06b8cc0c67381cb5d1b2a199b7dbe785ff28d6998b41a3e4c913b9f24ed70154bad1d095482e7b18a8ea3bc332eafd1bba9

    • SSDEEP

      3072:T4uvYl5yjK8RNbFUpbtVmxoPodf4qGP21ouv4Miu:T4kYXylkVtVKM+kPYow4M

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modifies WinLogon for persistence

      persistence

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Adds policy Run key to start application

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Deletes itself

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks