Overview

overview

10

Static

static

10

d0c2ab7ee5...18.exe

windows7-x64

10

d0c2ab7ee5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0c2ab7ee5b97c20a643d742898ca270_JaffaCakes118

  • Size

    688KB

  • Sample

    240907-bcm5lawfqj

  • MD5

    d0c2ab7ee5b97c20a643d742898ca270

  • SHA1

    2c97ecc14f3659f898b89a4ba9c77cc5c2eb8acd

  • SHA256

    b8708936abe1bf36149c034f756fc94d754d6f5912d6dad936e3a9c090e42a7b

  • SHA512

    faa670b708564237bfd0b9dfabd8a2b2832d5b7855264951f747114ca5f5e914077aa0128bbb25b33145e8ab346f365ca8f380557455fc63489e49f31a1cceaa

  • SSDEEP

    12288:FsgozT2HPgKxrp93jyJFY63FSNb9jEE1L//XyzZ267Ts8:WnGvgKxT2jYUSjLjazo67Th

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d0c2ab7ee5b97c20a643d742898ca270_JaffaCakes118

    • Size

      688KB

    • MD5

      d0c2ab7ee5b97c20a643d742898ca270

    • SHA1

      2c97ecc14f3659f898b89a4ba9c77cc5c2eb8acd

    • SHA256

      b8708936abe1bf36149c034f756fc94d754d6f5912d6dad936e3a9c090e42a7b

    • SHA512

      faa670b708564237bfd0b9dfabd8a2b2832d5b7855264951f747114ca5f5e914077aa0128bbb25b33145e8ab346f365ca8f380557455fc63489e49f31a1cceaa

    • SSDEEP

      12288:FsgozT2HPgKxrp93jyJFY63FSNb9jEE1L//XyzZ267Ts8:WnGvgKxT2jYUSjLjazo67Th

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks