Overview

overview

10

Static

static

3

047025c94c...18.exe

windows7-x64

10

047025c94c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    047025c94cb7d011d34695836d3be3fe_JaffaCakes118

  • Size

    298KB

  • Sample

    240620-km19mssfqq

  • MD5

    047025c94cb7d011d34695836d3be3fe

  • SHA1

    21ed050809828af9044cc3c5f20e5647bf411cd5

  • SHA256

    a4afc11379a9e8418d2a8ce928e68a21365353e4d48361b8284c9ab125f56c8b

  • SHA512

    dab36a3fc70a935b7bfa2cf9dd33936606fba5c86c484a78cda1278f5faeaa6df134a82a9111be983a91adb692797d9c6340ff2b16d6206f877a105ad991c118

  • SSDEEP

    6144:py30W+yNdOJy1iLMA6OHujuX4j1JnKjN/Mkhg5lK3FeKlHYGC6h+b0:pLWxOT6cKjXCNEkerK3F74TkV

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      047025c94cb7d011d34695836d3be3fe_JaffaCakes118

    • Size

      298KB

    • MD5

      047025c94cb7d011d34695836d3be3fe

    • SHA1

      21ed050809828af9044cc3c5f20e5647bf411cd5

    • SHA256

      a4afc11379a9e8418d2a8ce928e68a21365353e4d48361b8284c9ab125f56c8b

    • SHA512

      dab36a3fc70a935b7bfa2cf9dd33936606fba5c86c484a78cda1278f5faeaa6df134a82a9111be983a91adb692797d9c6340ff2b16d6206f877a105ad991c118

    • SSDEEP

      6144:py30W+yNdOJy1iLMA6OHujuX4j1JnKjN/Mkhg5lK3FeKlHYGC6h+b0:pLWxOT6cKjXCNEkerK3F74TkV

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks