Overview

overview

10

Static

static

3

6d796eb807...18.exe

windows7-x64

10

6d796eb807...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d796eb8076512e867bfc7fbbbd185cc_JaffaCakes118

  • Size

    253KB

  • Sample

    240524-f6zspsfa88

  • MD5

    6d796eb8076512e867bfc7fbbbd185cc

  • SHA1

    3123b1b1f2a93ce82f26769b3c4e48c5af031503

  • SHA256

    81d7e9b17f9a1122b2dab1920b4174316656dbbc9504ac35d1202727de5ee4e3

  • SHA512

    7f2b81c24121163c64e0bf648ed366643d2079311ddb3a34e181606d72d56174d3e8c8d3491354612b21df57063c47ae91195b13e35ca858425303ab8a0675c2

  • SSDEEP

    3072:KxKNLNEf5scWADv2+DAMKqur5gWrtonM95Jiy/U5rKN20Nn8fLsUYo3F5lA9j:A2coqsSYTgK00Nn8zsW39AJ

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      6d796eb8076512e867bfc7fbbbd185cc_JaffaCakes118

    • Size

      253KB

    • MD5

      6d796eb8076512e867bfc7fbbbd185cc

    • SHA1

      3123b1b1f2a93ce82f26769b3c4e48c5af031503

    • SHA256

      81d7e9b17f9a1122b2dab1920b4174316656dbbc9504ac35d1202727de5ee4e3

    • SHA512

      7f2b81c24121163c64e0bf648ed366643d2079311ddb3a34e181606d72d56174d3e8c8d3491354612b21df57063c47ae91195b13e35ca858425303ab8a0675c2

    • SSDEEP

      3072:KxKNLNEf5scWADv2+DAMKqur5gWrtonM95Jiy/U5rKN20Nn8fLsUYo3F5lA9j:A2coqsSYTgK00Nn8zsW39AJ

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks