Overview

overview

10

Static

static

3

2f5a1ed356...18.exe

windows7-x64

10

2f5a1ed356...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f5a1ed356e96acc9e17d1005e253da1_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240709-hh9dca1cjj

  • MD5

    2f5a1ed356e96acc9e17d1005e253da1

  • SHA1

    ef97f49ae23df71551b16f6331cf4e33eab1bbcb

  • SHA256

    2522e94caa4037f1d7b0f9fc23b10a1a9e0ec0ccc97875ffe54e2fab6f653b86

  • SHA512

    c2e1f81f754e6aa297eea19c4d322734115385472c65fc77c44085cd1989c8690969c1b5a1451c9d5b0b02f46aec1b058541a881fcb9b075a4be4319c54b4f76

  • SSDEEP

    24576:74Dy0Nftgmcnam/GDj1kByHR5NaspohmgVpXsaVUuDE7qbzPWtWoZ5nOU:EDxftKam/kWBARfaoo0gVpca2Twex7

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      2f5a1ed356e96acc9e17d1005e253da1_JaffaCakes118

    • Size

      1.4MB

    • MD5

      2f5a1ed356e96acc9e17d1005e253da1

    • SHA1

      ef97f49ae23df71551b16f6331cf4e33eab1bbcb

    • SHA256

      2522e94caa4037f1d7b0f9fc23b10a1a9e0ec0ccc97875ffe54e2fab6f653b86

    • SHA512

      c2e1f81f754e6aa297eea19c4d322734115385472c65fc77c44085cd1989c8690969c1b5a1451c9d5b0b02f46aec1b058541a881fcb9b075a4be4319c54b4f76

    • SSDEEP

      24576:74Dy0Nftgmcnam/GDj1kByHR5NaspohmgVpXsaVUuDE7qbzPWtWoZ5nOU:EDxftKam/kWBARfaoo0gVpca2Twex7

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks