Overview

overview

10

Static

static

10

1df83652c2...18.exe

windows7-x64

10

1df83652c2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1df83652c2ff87d8354c67761cc75af8_JaffaCakes118

  • Size

    858KB

  • Sample

    240506-xw995aaa75

  • MD5

    1df83652c2ff87d8354c67761cc75af8

  • SHA1

    a506c9628185801d1f9880e867682cdde285d2c7

  • SHA256

    2fe6397cdcf6b9697ba2df281ef68e50f79f1000bbc58d9bbe60e71be4fc3d50

  • SHA512

    92b3c9eb1367b08747c01508671d87225bb18eedf2dc9542c6c6bc6a876baef905dbd48ab3f8164d3c480946096198888e419e3bd1191ecec89b5383f63e9367

  • SSDEEP

    24576:XoK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAY:XoQU9Z5Y4+YSembcj3jjTcDuNML851cZ

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      1df83652c2ff87d8354c67761cc75af8_JaffaCakes118

    • Size

      858KB

    • MD5

      1df83652c2ff87d8354c67761cc75af8

    • SHA1

      a506c9628185801d1f9880e867682cdde285d2c7

    • SHA256

      2fe6397cdcf6b9697ba2df281ef68e50f79f1000bbc58d9bbe60e71be4fc3d50

    • SHA512

      92b3c9eb1367b08747c01508671d87225bb18eedf2dc9542c6c6bc6a876baef905dbd48ab3f8164d3c480946096198888e419e3bd1191ecec89b5383f63e9367

    • SSDEEP

      24576:XoK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAY:XoQU9Z5Y4+YSembcj3jjTcDuNML851cZ

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks