Overview

overview

10

Static

static

10

d46b0f4d3c...18.exe

windows7-x64

10

d46b0f4d3c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d46b0f4d3cde75f110d388d1aaf88eed_JaffaCakes118

  • Size

    88KB

  • Sample

    240908-p8y4maxdkq

  • MD5

    d46b0f4d3cde75f110d388d1aaf88eed

  • SHA1

    04678b40cec1660a6148e1b549adb40020c132ce

  • SHA256

    9d26a57a3c0c71193b19baef3821936031fe62dbf02d95cc52ad4c05af2f9bfe

  • SHA512

    9e540aecfd17fde337cb30ff447c27fcfb6e54e4ec91b82bd419eb1db507d1a15ad477ba505525e517c471aeab957d9de9173018be1ba8610ec2083df70d972b

  • SSDEEP

    1536:dcRmRam+Syi2SZwyEgpgAXV8T/Tbe4cb//K5KF:2Rm41i2SKgpzRD//K5

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d46b0f4d3cde75f110d388d1aaf88eed_JaffaCakes118

    • Size

      88KB

    • MD5

      d46b0f4d3cde75f110d388d1aaf88eed

    • SHA1

      04678b40cec1660a6148e1b549adb40020c132ce

    • SHA256

      9d26a57a3c0c71193b19baef3821936031fe62dbf02d95cc52ad4c05af2f9bfe

    • SHA512

      9e540aecfd17fde337cb30ff447c27fcfb6e54e4ec91b82bd419eb1db507d1a15ad477ba505525e517c471aeab957d9de9173018be1ba8610ec2083df70d972b

    • SSDEEP

      1536:dcRmRam+Syi2SZwyEgpgAXV8T/Tbe4cb//K5KF:2Rm41i2SKgpzRD//K5

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks