Overview

overview

10

Static

static

10

cc7d83ea40...18.exe

windows7-x64

10

cc7d83ea40...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc7d83ea40d18f67cf9d2c7e9bf383c8_JaffaCakes118

  • Size

    724KB

  • Sample

    240831-khl9xsvcql

  • MD5

    cc7d83ea40d18f67cf9d2c7e9bf383c8

  • SHA1

    871aff88a6cd42c3580c510dfdfd52bc101c0fed

  • SHA256

    77b6fa0fa1ba171da2ea3d7e619cd91fe3af7cc8acc496a5f1e6adece473642c

  • SHA512

    afda01b7edf9e96d780fdbaf8cafd2018d42a73b2223e718c16aff5355ba0f87795197e221398eb47a0129cf72d51e9ef6ad86e5524ca43eefba883312923d32

  • SSDEEP

    12288:+tS5RTQ7aT7YilhjzAF4gv6tLjwURq93tuwOATOoK:Wc22T7BRS46kjBY2TATe

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      cc7d83ea40d18f67cf9d2c7e9bf383c8_JaffaCakes118

    • Size

      724KB

    • MD5

      cc7d83ea40d18f67cf9d2c7e9bf383c8

    • SHA1

      871aff88a6cd42c3580c510dfdfd52bc101c0fed

    • SHA256

      77b6fa0fa1ba171da2ea3d7e619cd91fe3af7cc8acc496a5f1e6adece473642c

    • SHA512

      afda01b7edf9e96d780fdbaf8cafd2018d42a73b2223e718c16aff5355ba0f87795197e221398eb47a0129cf72d51e9ef6ad86e5524ca43eefba883312923d32

    • SSDEEP

      12288:+tS5RTQ7aT7YilhjzAF4gv6tLjwURq93tuwOATOoK:Wc22T7BRS46kjBY2TATe

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks