Overview

overview

10

Static

static

10

JaffaCakes...91.exe

windows7-x64

10

JaffaCakes...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0f880376b61848f4526000856c926d91

  • Size

    312KB

  • Sample

    250122-vdc6kawrfj

  • MD5

    0f880376b61848f4526000856c926d91

  • SHA1

    2a597bdf193987b823f85edbfece1a8ca35f5880

  • SHA256

    ce4da1b8aee8e00043c15b872053bbb37fda7aae9420eab8284b5d3b2f9d343a

  • SHA512

    00c38d08ee328dd3b4afea9696cda09d141fc5534c9b540930e16afdfb00b4ec913fd8bb4ca89123f8808d505e982a2ea0da9556b420acd88cb49834b51b519c

  • SSDEEP

    6144:FG377xS2Vp2VpU5A4rwTBt53ppcCJJvHqXoS:Ir7xS2VpmUmQwTjbJJvHSoS

Score
10/10
modiloaderdefense_evasiondiscoverytrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_0f880376b61848f4526000856c926d91

    • Size

      312KB

    • MD5

      0f880376b61848f4526000856c926d91

    • SHA1

      2a597bdf193987b823f85edbfece1a8ca35f5880

    • SHA256

      ce4da1b8aee8e00043c15b872053bbb37fda7aae9420eab8284b5d3b2f9d343a

    • SHA512

      00c38d08ee328dd3b4afea9696cda09d141fc5534c9b540930e16afdfb00b4ec913fd8bb4ca89123f8808d505e982a2ea0da9556b420acd88cb49834b51b519c

    • SSDEEP

      6144:FG377xS2Vp2VpU5A4rwTBt53ppcCJJvHqXoS:Ir7xS2VpmUmQwTjbJJvHSoS

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      defense_evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks