Overview

overview

10

Static

static

3

ab449e0f20...18.exe

windows7-x64

10

ab449e0f20...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab449e0f2008268b5a257f7dcc0de5b5_JaffaCakes118

  • Size

    685KB

  • Sample

    240819-q324rs1bmr

  • MD5

    ab449e0f2008268b5a257f7dcc0de5b5

  • SHA1

    61bf0d93e111de28d414aba0f4a0f85288bf5aae

  • SHA256

    948ec20749e2012a94115708d63b9f8d4050c0d283844c89c978bcf27d8732fb

  • SHA512

    795a1bffb6b838aa625d2da9b73921a5ce7bbc314c95b45c23e2b20479b466912149287f1932a0e75bdd0d524503b2f9dd79776365ebe0518abe1cd622dd1fea

  • SSDEEP

    12288:MizJbniWlbbkgKZek+fZ0gj+Lk3gtF3Z4mxxLQHgac9R70:M8JbDbkgKI6gaLk3gtQmXL+gP9q

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ab449e0f2008268b5a257f7dcc0de5b5_JaffaCakes118

    • Size

      685KB

    • MD5

      ab449e0f2008268b5a257f7dcc0de5b5

    • SHA1

      61bf0d93e111de28d414aba0f4a0f85288bf5aae

    • SHA256

      948ec20749e2012a94115708d63b9f8d4050c0d283844c89c978bcf27d8732fb

    • SHA512

      795a1bffb6b838aa625d2da9b73921a5ce7bbc314c95b45c23e2b20479b466912149287f1932a0e75bdd0d524503b2f9dd79776365ebe0518abe1cd622dd1fea

    • SSDEEP

      12288:MizJbniWlbbkgKZek+fZ0gj+Lk3gtF3Z4mxxLQHgac9R70:M8JbDbkgKI6gaLk3gtQmXL+gP9q

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks