Overview

overview

10

Static

static

5

JaffaCakes...de.exe

windows7-x64

10

JaffaCakes...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_966fcbcb17dfc2f6c1457d28fb369ade

  • Size

    372KB

  • Sample

    250329-ynghhsxwdy

  • MD5

    966fcbcb17dfc2f6c1457d28fb369ade

  • SHA1

    738b1818def1d22e81565dc6cca30f892b0ba2da

  • SHA256

    e493d287a40c92f0b00a2ebe8d6dc542cdbcb90f126e6e7c7ad564dfcd651bef

  • SHA512

    5448307a7bf7d19e6be1c5b9b10caa62b42ee01ee730ef699b59d8562083984bc736d929132a0d50eb818809220576b05a528bd0f9e2582e0c38ee5ddac1e1ee

  • SSDEEP

    6144:JBgh/58KGip9lmh0UwwDdxtPw13OyhFR8uHQagYI9FFweu9DEFx1hs:JBMmKGnhDT+JlCnFweu9DEFS

Score
10/10
modiloaderdefense_evasiondiscoverytrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_966fcbcb17dfc2f6c1457d28fb369ade

    • Size

      372KB

    • MD5

      966fcbcb17dfc2f6c1457d28fb369ade

    • SHA1

      738b1818def1d22e81565dc6cca30f892b0ba2da

    • SHA256

      e493d287a40c92f0b00a2ebe8d6dc542cdbcb90f126e6e7c7ad564dfcd651bef

    • SHA512

      5448307a7bf7d19e6be1c5b9b10caa62b42ee01ee730ef699b59d8562083984bc736d929132a0d50eb818809220576b05a528bd0f9e2582e0c38ee5ddac1e1ee

    • SSDEEP

      6144:JBgh/58KGip9lmh0UwwDdxtPw13OyhFR8uHQagYI9FFweu9DEFx1hs:JBMmKGnhDT+JlCnFweu9DEFS

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • UAC bypass

      defense_evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks