General
- Target jaffacakes118_Trojan.Win32.Agent.qwfjil.464ca74679e4fe06f7b958aa62861416
- Size 127KB
- Sample261015-28mrtaew7r
- SHA256 200677841397ca8fce4397937d3af9c0e7ea5e032b62145a518d7432fa8697de
Score
10/10
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Agent.qwfjil.464ca74679e4fe06f7b958aa62861416
- Size 127KB
- SHA256 200677841397ca8fce4397937d3af9c0e7ea5e032b62145a518d7432fa8697de
Score10/10-
Family: ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
UAC bypass
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2