Overview

overview

10

Static

static

10

d79a986fac...18.exe

windows7-x64

10

d79a986fac...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d79a986fac16f14a1561bbffe97bf4ee_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240910-fegg2sxdnp

  • MD5

    d79a986fac16f14a1561bbffe97bf4ee

  • SHA1

    91ac2920ff8dd0f63954da593f1f60b3013ab46f

  • SHA256

    2f158ff270c624df3dc6e5121c8b4ff6bf244abb5ed2987c754a4fbc6d648a70

  • SHA512

    e4b9f2ddf995cd380dc17b26a495a3a3417c04acfedc792ccf10d47826da7d42b1c9c958ea7c769fc042df890e64f1d3c6cfe796483bc44b0b7a0449478c59f5

  • SSDEEP

    24576:N9IcP2krVkRyUUZuX3AT3um1fLPDorobcGGu/QS:NN3uXwTe0LPDorobcGGu4S

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d79a986fac16f14a1561bbffe97bf4ee_JaffaCakes118

    • Size

      1.3MB

    • MD5

      d79a986fac16f14a1561bbffe97bf4ee

    • SHA1

      91ac2920ff8dd0f63954da593f1f60b3013ab46f

    • SHA256

      2f158ff270c624df3dc6e5121c8b4ff6bf244abb5ed2987c754a4fbc6d648a70

    • SHA512

      e4b9f2ddf995cd380dc17b26a495a3a3417c04acfedc792ccf10d47826da7d42b1c9c958ea7c769fc042df890e64f1d3c6cfe796483bc44b0b7a0449478c59f5

    • SSDEEP

      24576:N9IcP2krVkRyUUZuX3AT3um1fLPDorobcGGu/QS:NN3uXwTe0LPDorobcGGu4S

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks