Overview

overview

10

Static

static

3

0804a8a966...18.exe

windows7-x64

10

0804a8a966...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0804a8a96641c1fdf34a7bace3e631df_JaffaCakes118

  • Size

    307KB

  • Sample

    240620-vkctdasejr

  • MD5

    0804a8a96641c1fdf34a7bace3e631df

  • SHA1

    b186a9d3fec5a3ce2ff60ae77692baf86d1eecb6

  • SHA256

    6a190bcafe9cc319f49062f37afb7ab5cd0abd61b95a7cd027c61edb1c16ba09

  • SHA512

    f1f97cfc503f0b35d8ab1e069cc948e21536baa701babb319045ad84bec14060e2854477e31fb6dc9146de0ff9ad440822b5f3835acafcd1b4470a5be5c49e6f

  • SSDEEP

    6144:160drKkUVCjsAJ6QrA+wK5e87AHZ+Z1/uGokN/Fdb65a:Xd9cjRQrhwI73uGhzu5

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      0804a8a96641c1fdf34a7bace3e631df_JaffaCakes118

    • Size

      307KB

    • MD5

      0804a8a96641c1fdf34a7bace3e631df

    • SHA1

      b186a9d3fec5a3ce2ff60ae77692baf86d1eecb6

    • SHA256

      6a190bcafe9cc319f49062f37afb7ab5cd0abd61b95a7cd027c61edb1c16ba09

    • SHA512

      f1f97cfc503f0b35d8ab1e069cc948e21536baa701babb319045ad84bec14060e2854477e31fb6dc9146de0ff9ad440822b5f3835acafcd1b4470a5be5c49e6f

    • SSDEEP

      6144:160drKkUVCjsAJ6QrA+wK5e87AHZ+Z1/uGokN/Fdb65a:Xd9cjRQrhwI73uGhzu5

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks