Overview

overview

10

Static

static

10

d6beedce78...18.exe

windows7-x64

10

d6beedce78...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6beedce7844666914296946b0a04492_JaffaCakes118

  • Size

    17KB

  • Sample

    240909-vh6zfa1gka

  • MD5

    d6beedce7844666914296946b0a04492

  • SHA1

    5c4ce021c7b00e6ecdcb3a3f6c8b46e48946f0c4

  • SHA256

    5b16f8986c7d08382ff2d8257cf73f2fd3b8f64026e7863404e6f36ea0a3fc7a

  • SHA512

    f8e8882acdb3e9c308a5d36891308057f06b87515dc9d89abc3867ba1acc85bbc097b47066836ecad94e927ec93b97e3f98158f797a40d1b8a7e2c2f4586b338

  • SSDEEP

    384:gh+ydlyiP4brSw+a8nJxY8e0DOibuViyAE:g8fP8rY0ucyp

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d6beedce7844666914296946b0a04492_JaffaCakes118

    • Size

      17KB

    • MD5

      d6beedce7844666914296946b0a04492

    • SHA1

      5c4ce021c7b00e6ecdcb3a3f6c8b46e48946f0c4

    • SHA256

      5b16f8986c7d08382ff2d8257cf73f2fd3b8f64026e7863404e6f36ea0a3fc7a

    • SHA512

      f8e8882acdb3e9c308a5d36891308057f06b87515dc9d89abc3867ba1acc85bbc097b47066836ecad94e927ec93b97e3f98158f797a40d1b8a7e2c2f4586b338

    • SSDEEP

      384:gh+ydlyiP4brSw+a8nJxY8e0DOibuViyAE:g8fP8rY0ucyp

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks