Overview

overview

10

Static

static

3

d88656186c...18.exe

windows7-x64

10

d88656186c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d88656186cacc2b23048a308aad33cde_JaffaCakes118

  • Size

    411KB

  • Sample

    240910-s9xtqs1ejr

  • MD5

    d88656186cacc2b23048a308aad33cde

  • SHA1

    11d47669453a2c66ef1d6fe91b57f02f1a9890e0

  • SHA256

    bf3b7f9a5fe840e7812ec79c0744d1ea7cea64f8336e827d42d39ef163ee86d6

  • SHA512

    a9590d03a3d53b2d80e166a214a3467132e4af91433e07785f58b345991335e5a38e4b6ef3c1729295750e12d9763aa6aa6521d11951bb2d38f1b0d58ad6d5c2

  • SSDEEP

    12288:0B7WvlDPArt5zNAydiHRRlihfcZ7m2CCocQ7JHgawFfLRUTV5n:0B7elTA5wYiHRimZ7m2CaQwf+TV5n

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d88656186cacc2b23048a308aad33cde_JaffaCakes118

    • Size

      411KB

    • MD5

      d88656186cacc2b23048a308aad33cde

    • SHA1

      11d47669453a2c66ef1d6fe91b57f02f1a9890e0

    • SHA256

      bf3b7f9a5fe840e7812ec79c0744d1ea7cea64f8336e827d42d39ef163ee86d6

    • SHA512

      a9590d03a3d53b2d80e166a214a3467132e4af91433e07785f58b345991335e5a38e4b6ef3c1729295750e12d9763aa6aa6521d11951bb2d38f1b0d58ad6d5c2

    • SSDEEP

      12288:0B7WvlDPArt5zNAydiHRRlihfcZ7m2CCocQ7JHgawFfLRUTV5n:0B7elTA5wYiHRimZ7m2CaQwf+TV5n

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks