Overview

overview

10

Static

static

3

d7d51c914e...18.exe

windows7-x64

10

d7d51c914e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7d51c914eb0f51e73e41a3e61f053c4_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240910-jrbn4svclh

  • MD5

    d7d51c914eb0f51e73e41a3e61f053c4

  • SHA1

    dfd1f245bbecd637aad5611ba0165bffe1d5eaf9

  • SHA256

    638fab842b8624c1042bc2c2c4e88e85f260c82124940232b1bf7cce2ee59a8a

  • SHA512

    1aca0fa3c24dedd591fad65e19448603bf81fb0c24f86b4536d16a203915fdcac59fb10d43407f9f7acaf8f622ad8ad946dec44c783b41b53c33ef09256d7ea9

  • SSDEEP

    24576:Y42cvACuX6MMv6OchLe/lZwqg3yz0aar42HiEgZFdZEQ3IPEWEpzpj/ciIp:IRLIKwhiyA42HNgzDEQ3Iqpz1ctp

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d7d51c914eb0f51e73e41a3e61f053c4_JaffaCakes118

    • Size

      1.4MB

    • MD5

      d7d51c914eb0f51e73e41a3e61f053c4

    • SHA1

      dfd1f245bbecd637aad5611ba0165bffe1d5eaf9

    • SHA256

      638fab842b8624c1042bc2c2c4e88e85f260c82124940232b1bf7cce2ee59a8a

    • SHA512

      1aca0fa3c24dedd591fad65e19448603bf81fb0c24f86b4536d16a203915fdcac59fb10d43407f9f7acaf8f622ad8ad946dec44c783b41b53c33ef09256d7ea9

    • SSDEEP

      24576:Y42cvACuX6MMv6OchLe/lZwqg3yz0aar42HiEgZFdZEQ3IPEWEpzpj/ciIp:IRLIKwhiyA42HNgzDEQ3Iqpz1ctp

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks