Overview

overview

10

Static

static

3

JaffaCakes...1d.exe

windows7-x64

10

JaffaCakes...1d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1dc10be078a7b3863b729fbcce0bb11d

  • Size

    248KB

  • Sample

    250124-elgkysylew

  • MD5

    1dc10be078a7b3863b729fbcce0bb11d

  • SHA1

    e020ae42a238d1564329039e42cc447cafef9daf

  • SHA256

    dd66c8f79b419ed79cddc2b621fdb801eb5841006328c7db1936ce9866cb04f2

  • SHA512

    367a60f6e2f1323dcd65c0e02ae046c1e2a10c5ff7ce98f6f9e3499385f56497df139245c5cc3d84c3187db47df490261aa52a038af3dc7c0243c10db7894f68

  • SSDEEP

    3072:sheejCsqAuzvKHFc1kGzsARtqPI1Fe4v/v/EjUHXVtA9WR7v9dQWt:cesmzyHFkzaP4v/v/E2XVtAQ99dDt

Score
10/10
modiloaderdefense_evasiondiscoverytrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_1dc10be078a7b3863b729fbcce0bb11d

    • Size

      248KB

    • MD5

      1dc10be078a7b3863b729fbcce0bb11d

    • SHA1

      e020ae42a238d1564329039e42cc447cafef9daf

    • SHA256

      dd66c8f79b419ed79cddc2b621fdb801eb5841006328c7db1936ce9866cb04f2

    • SHA512

      367a60f6e2f1323dcd65c0e02ae046c1e2a10c5ff7ce98f6f9e3499385f56497df139245c5cc3d84c3187db47df490261aa52a038af3dc7c0243c10db7894f68

    • SSDEEP

      3072:sheejCsqAuzvKHFc1kGzsARtqPI1Fe4v/v/EjUHXVtA9WR7v9dQWt:cesmzyHFkzaP4v/v/E2XVtAQ99dDt

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      defense_evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks