Overview

overview

10

Static

static

3

23adac595a...18.exe

windows7-x64

10

23adac595a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23adac595a4a2be82e7838ed98d9e768_JaffaCakes118

  • Size

    536KB

  • Sample

    240703-2g3nysyhrl

  • MD5

    23adac595a4a2be82e7838ed98d9e768

  • SHA1

    0701b89d4fd029f4061617ad56537e3d0bb493a3

  • SHA256

    0fa8bc823cf03e1bd58412d7c3fd01bcc8dc9e8bc70855b2db505b01b27efe3d

  • SHA512

    7cacb49e59ed5a318f59e57dbc29598bda5b5c5a28ad39e4043339b367cf0ece6a2208a67bd5f666ece43d82f2f243d65a605062103b5e8b7f0d3184d6fab04b

  • SSDEEP

    12288:8aICCl4aBSX9DWXbM2Hp9BmrbO4u52eLwIoHKR+/1xR8l9h:Ojl4iStDWo2fBmrI5ToKs6h

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      23adac595a4a2be82e7838ed98d9e768_JaffaCakes118

    • Size

      536KB

    • MD5

      23adac595a4a2be82e7838ed98d9e768

    • SHA1

      0701b89d4fd029f4061617ad56537e3d0bb493a3

    • SHA256

      0fa8bc823cf03e1bd58412d7c3fd01bcc8dc9e8bc70855b2db505b01b27efe3d

    • SHA512

      7cacb49e59ed5a318f59e57dbc29598bda5b5c5a28ad39e4043339b367cf0ece6a2208a67bd5f666ece43d82f2f243d65a605062103b5e8b7f0d3184d6fab04b

    • SSDEEP

      12288:8aICCl4aBSX9DWXbM2Hp9BmrbO4u52eLwIoHKR+/1xR8l9h:Ojl4iStDWo2fBmrI5ToKs6h

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks