Overview

overview

10

Static

static

10

JaffaCakes...89.exe

windows7-x64

10

JaffaCakes...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6778b06bc3e98136209398ca3439e889

  • Size

    273KB

  • Sample

    250102-xqma4svlen

  • MD5

    6778b06bc3e98136209398ca3439e889

  • SHA1

    e439a03cdf311e5fd9ca69c87a6c2af1450ab7de

  • SHA256

    c167603fed2f64b67fe4b45097c2bf4f30800391f7ed9258a0684b987b7e221d

  • SHA512

    36e8e0320ff56313523a16068a796146600f6542959143c9ef62c328ddba430e57c4a3b65e5fde6f47e6842f3914e8bb40da830dd15fc35a9fcd0c77802771ed

  • SSDEEP

    6144:RG377xS2Vp2CeiorXdwTBgWx4p53XCxpcCJJvH9:Er7xS2Vp6RwTyCfxbJJvH9

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      JaffaCakes118_6778b06bc3e98136209398ca3439e889

    • Size

      273KB

    • MD5

      6778b06bc3e98136209398ca3439e889

    • SHA1

      e439a03cdf311e5fd9ca69c87a6c2af1450ab7de

    • SHA256

      c167603fed2f64b67fe4b45097c2bf4f30800391f7ed9258a0684b987b7e221d

    • SHA512

      36e8e0320ff56313523a16068a796146600f6542959143c9ef62c328ddba430e57c4a3b65e5fde6f47e6842f3914e8bb40da830dd15fc35a9fcd0c77802771ed

    • SSDEEP

      6144:RG377xS2Vp2CeiorXdwTBgWx4p53XCxpcCJJvH9:Er7xS2Vp6RwTyCfxbJJvH9

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks