Overview

overview

10

Static

static

3

d7a5483bcf...18.exe

windows7-x64

10

d7a5483bcf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7a5483bcf104a4c5cca96f756b0c3ab_JaffaCakes118

  • Size

    684KB

  • Sample

    240910-f5mfzszepa

  • MD5

    d7a5483bcf104a4c5cca96f756b0c3ab

  • SHA1

    04f93a087a91e84e5b801b30642677ad14f935a0

  • SHA256

    22b57815ab4083f4286f34a7351be8630829ceef02fa310ca7b0284b628be57d

  • SHA512

    511f356e6ae59054817549dba99a2eb483a5e7febce85384c73b7a4cd7f6527c620c6d77e090c1675c1e0b53e04627b416217328d0de25789581a52ef5f897d0

  • SSDEEP

    12288:LIysVDeJAXafT16zf4Dl7pWJTal/leB3F3Z4mxxrH2dAcq:LxsVDeJAXsT16zAJtWEFYB3QmXz2ycq

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d7a5483bcf104a4c5cca96f756b0c3ab_JaffaCakes118

    • Size

      684KB

    • MD5

      d7a5483bcf104a4c5cca96f756b0c3ab

    • SHA1

      04f93a087a91e84e5b801b30642677ad14f935a0

    • SHA256

      22b57815ab4083f4286f34a7351be8630829ceef02fa310ca7b0284b628be57d

    • SHA512

      511f356e6ae59054817549dba99a2eb483a5e7febce85384c73b7a4cd7f6527c620c6d77e090c1675c1e0b53e04627b416217328d0de25789581a52ef5f897d0

    • SSDEEP

      12288:LIysVDeJAXafT16zf4Dl7pWJTal/leB3F3Z4mxxrH2dAcq:LxsVDeJAXsT16zAJtWEFYB3QmXz2ycq

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks