Overview

overview

10

Static

static

3

324fb7ba3c...18.exe

windows7-x64

10

324fb7ba3c...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    324fb7ba3ccbf7db9baed8456daae8b4_JaffaCakes118

  • Size

    188KB

  • Sample

    240709-2vmvna1bkq

  • MD5

    324fb7ba3ccbf7db9baed8456daae8b4

  • SHA1

    e4d4c3a1308d34c01963199ad4e2ad83177d6efd

  • SHA256

    4806c4a2d3bd301e31d027cc4d55b9ac27aa617271fa5673599afd706a9db45e

  • SHA512

    08af97e04faae3dfcf9686f4ba927e9405fa99282a1c69bb548ba98a7b017883148b072e7474295c47ebd475caede5649370dca9c1b6dfe86970231646ad9a29

  • SSDEEP

    3072:lcS/1nLl7vZw0ckvNCcQCUl+uMXdurhXx2t40S2ohsW7/1EcfUCCvbmjjRiQBrEI:lcS/rv/C0vu9ECsQEc8CCvbmjj9B3AFs

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      324fb7ba3ccbf7db9baed8456daae8b4_JaffaCakes118

    • Size

      188KB

    • MD5

      324fb7ba3ccbf7db9baed8456daae8b4

    • SHA1

      e4d4c3a1308d34c01963199ad4e2ad83177d6efd

    • SHA256

      4806c4a2d3bd301e31d027cc4d55b9ac27aa617271fa5673599afd706a9db45e

    • SHA512

      08af97e04faae3dfcf9686f4ba927e9405fa99282a1c69bb548ba98a7b017883148b072e7474295c47ebd475caede5649370dca9c1b6dfe86970231646ad9a29

    • SSDEEP

      3072:lcS/1nLl7vZw0ckvNCcQCUl+uMXdurhXx2t40S2ohsW7/1EcfUCCvbmjjRiQBrEI:lcS/rv/C0vu9ECsQEc8CCvbmjj9B3AFs

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks