Overview

overview

10

Static

static

5

JaffaCakes...6a.exe

windows7-x64

10

JaffaCakes...6a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_de2444fae2831674dbfc4db0d3f3456a

  • Size

    3.4MB

  • Sample

    250120-gm37fsvjgw

  • MD5

    de2444fae2831674dbfc4db0d3f3456a

  • SHA1

    1457bef00341e146b69d3667d94172e090a1a453

  • SHA256

    2944d1e90da2dc73c66fd97f9df66f110f2b01930d24391a4e8e199fe826c3d2

  • SHA512

    d78b739a7a480742b843b63236707c4634703b7cb577b0cdca3db6301138b2368abbb4f854dc6a2e841af9e9119ede932fae12db76ce73476f8967cf966f9f45

  • SSDEEP

    98304:Lw8bx6XN8LqpTS8irKg9rsInRO6i3YEMHEU+KqrWXr0ZNMDji:08N8N8Gp+hsIRU3M8W7wNMD+

Score
10/10
modiloaderdiscoverytrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_de2444fae2831674dbfc4db0d3f3456a

    • Size

      3.4MB

    • MD5

      de2444fae2831674dbfc4db0d3f3456a

    • SHA1

      1457bef00341e146b69d3667d94172e090a1a453

    • SHA256

      2944d1e90da2dc73c66fd97f9df66f110f2b01930d24391a4e8e199fe826c3d2

    • SHA512

      d78b739a7a480742b843b63236707c4634703b7cb577b0cdca3db6301138b2368abbb4f854dc6a2e841af9e9119ede932fae12db76ce73476f8967cf966f9f45

    • SSDEEP

      98304:Lw8bx6XN8LqpTS8irKg9rsInRO6i3YEMHEU+KqrWXr0ZNMDji:08N8N8Gp+hsIRU3M8W7wNMD+

    Score
    10/10
    modiloaderdiscoverytrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks