Overview

overview

10

Static

static

3

ae0b1849d5...18.exe

windows7-x64

10

ae0b1849d5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae0b1849d58568d0bbb0c504ab815f7f_JaffaCakes118

  • Size

    426KB

  • Sample

    240820-f9228szapn

  • MD5

    ae0b1849d58568d0bbb0c504ab815f7f

  • SHA1

    80e94ffa9425acb68ffcf308489cc8a3b90c4562

  • SHA256

    a18906d1667bc9f0db7eef833c4549038053c37233c41e1ac888f564f995da44

  • SHA512

    fb34bfda79454bdc520f631744c8314ad7646e8640ad7812ad82c6af4fce464666e8d8a0ddc0230dcc9efbdbbbf0296b6cada0bdb58974aa8a6a72a29a140632

  • SSDEEP

    12288:aI8YGP0RMeSy80hYZxyafGFJAZ5wEcFcJH:npAKMeShYfaiAwS

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ae0b1849d58568d0bbb0c504ab815f7f_JaffaCakes118

    • Size

      426KB

    • MD5

      ae0b1849d58568d0bbb0c504ab815f7f

    • SHA1

      80e94ffa9425acb68ffcf308489cc8a3b90c4562

    • SHA256

      a18906d1667bc9f0db7eef833c4549038053c37233c41e1ac888f564f995da44

    • SHA512

      fb34bfda79454bdc520f631744c8314ad7646e8640ad7812ad82c6af4fce464666e8d8a0ddc0230dcc9efbdbbbf0296b6cada0bdb58974aa8a6a72a29a140632

    • SSDEEP

      12288:aI8YGP0RMeSy80hYZxyafGFJAZ5wEcFcJH:npAKMeShYfaiAwS

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks