Overview

overview

10

Static

static

10

d92c2e7953...18.exe

windows7-x64

10

d92c2e7953...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d92c2e7953f27f7612ef252cadf2c99b_JaffaCakes118

  • Size

    269KB

  • Sample

    240910-22gl8azapm

  • MD5

    d92c2e7953f27f7612ef252cadf2c99b

  • SHA1

    8822d7d4c4ed35a454cafcf2e59c271b972cd9d1

  • SHA256

    23a2ab53d60965bdc69e42500f1ee827b54d8d6cf5a27a7f5f2cc9d9d3597065

  • SHA512

    f2bac8ee196cd450733863f19aa19f2d488c264076a6164b3bf5c0b45295fcbbd2043035ea495dd4f322c9c366f0afd81f647d6964a408223532c3f6553f4782

  • SSDEEP

    6144:/Zw+OAXJolC4ab+4ybMjp4HfaXDmMDKDDS5r4B+0bkw2mh:/iAX+faa9bByXDmi3xTvY

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d92c2e7953f27f7612ef252cadf2c99b_JaffaCakes118

    • Size

      269KB

    • MD5

      d92c2e7953f27f7612ef252cadf2c99b

    • SHA1

      8822d7d4c4ed35a454cafcf2e59c271b972cd9d1

    • SHA256

      23a2ab53d60965bdc69e42500f1ee827b54d8d6cf5a27a7f5f2cc9d9d3597065

    • SHA512

      f2bac8ee196cd450733863f19aa19f2d488c264076a6164b3bf5c0b45295fcbbd2043035ea495dd4f322c9c366f0afd81f647d6964a408223532c3f6553f4782

    • SSDEEP

      6144:/Zw+OAXJolC4ab+4ybMjp4HfaXDmMDKDDS5r4B+0bkw2mh:/iAX+faa9bByXDmi3xTvY

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks