Overview

overview

10

Static

static

3

198ac2f35e...18.exe

windows7-x64

10

198ac2f35e...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-06-2024 08:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    198ac2f35e95faab215f9dad2bca324c_JaffaCakes118.exe

  • Size

    51KB

  • MD5

    198ac2f35e95faab215f9dad2bca324c

  • SHA1

    6f3e3f97c914a98ca9de0f94c90e391eed17400e

  • SHA256

    4f7717a566d89d50e2e12212dfd4e325489650185c19cf4db56b8d50cf1d9025

  • SHA512

    ae9f7ad3d98e4a1417cb8274bb19c795d3eb302d606f2f93f5c049a5ad3db8ee363ca1d122e458a88a27585f7b2814e144e2587dbab1ee01a12dda4f4d72163d

  • SSDEEP

    768:cV2tmKcwIfY7nvFjkrBvbGo1zOY/NSQzDZTHCU58HOfUTwAQZQqyKtV3LoobLgSB:G2tm1RY7ncS8OYgqU8SqRyKLRMhUCw

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 2 IoCs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\198ac2f35e95faab215f9dad2bca324c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\198ac2f35e95faab215f9dad2bca324c_JaffaCakes118.exe"
    1⤵
      PID:1936
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1936 -s 488
        2⤵
        • Program crash
        PID:1516
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1936 -ip 1936
      1⤵
        PID:1672

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1936-1-0x00000000001C0000-0x0000000000200000-memory.dmp
        Filesize

        256KB

        Download
      • memory/1936-0-0x0000000000400000-0x0000000000454000-memory.dmp
        Filesize

        336KB

        Download
      • memory/1936-2-0x0000000000400000-0x0000000000454000-memory.dmp
        Filesize

        336KB

        Download