Overview

overview

10

Static

static

3

045eba5c55...18.exe

windows7-x64

10

045eba5c55...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    045eba5c557f78f80f5bd0f1cb81a8cf_JaffaCakes118

  • Size

    581KB

  • Sample

    240620-keregaxhpc

  • MD5

    045eba5c557f78f80f5bd0f1cb81a8cf

  • SHA1

    26177198dac244c131e9026f38bf4ce93fe07d98

  • SHA256

    5d42c938d43e8ee3b2065e64e28fd8b6fc9fd8ea32695a3cdae21c15fe7be34e

  • SHA512

    8c987d8f70eee8fe6dfc6402127e3a688ea913e47727b72aed6ffebe6c6621bf12d2d09cdc480c518d2e7090f21a54e35573c3a6ae3eff2323e840b020245952

  • SSDEEP

    12288:wZzmBuSgOOgotR2yDTFjOzzSdgzLF3Z4mxxbyuRCvyCJcdwmqagLAoJ9j:+UZX/yDTknSgQmXNcKndwIgLdj

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      045eba5c557f78f80f5bd0f1cb81a8cf_JaffaCakes118

    • Size

      581KB

    • MD5

      045eba5c557f78f80f5bd0f1cb81a8cf

    • SHA1

      26177198dac244c131e9026f38bf4ce93fe07d98

    • SHA256

      5d42c938d43e8ee3b2065e64e28fd8b6fc9fd8ea32695a3cdae21c15fe7be34e

    • SHA512

      8c987d8f70eee8fe6dfc6402127e3a688ea913e47727b72aed6ffebe6c6621bf12d2d09cdc480c518d2e7090f21a54e35573c3a6ae3eff2323e840b020245952

    • SSDEEP

      12288:wZzmBuSgOOgotR2yDTFjOzzSdgzLF3Z4mxxbyuRCvyCJcdwmqagLAoJ9j:+UZX/yDTknSgQmXNcKndwIgLdj

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks