Overview

overview

10

Static

static

1

d9d2c0b7e0...18.exe

windows7-x64

10

d9d2c0b7e0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9d2c0b7e0a57368ba12cb8647dd6085_JaffaCakes118

  • Size

    543KB

  • Sample

    240911-hp28lsydjf

  • MD5

    d9d2c0b7e0a57368ba12cb8647dd6085

  • SHA1

    d5fa1f46d5b5b1aafe260d66666b96d2c82f429f

  • SHA256

    b10621fc52963f3018a5e9b084c37a837c3120f57ba33db6e246575cb1c0cfb2

  • SHA512

    5a4b1e6ad677b1aab74681541de414ade3d3026f7b0c70b6fffab267176b63acf337fe8ae994140e8aa530712a73708ab00990e9a22651e11cad71d020ac60cc

  • SSDEEP

    12288:KGrqNTd7xWlpdSFJcU+5Kys5ApySWrcRHI2N+GEdFSw3/7XREK/Du+s:KGqTdYcFmUmVs5Av8cRHI0EdRP7XzSR

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d9d2c0b7e0a57368ba12cb8647dd6085_JaffaCakes118

    • Size

      543KB

    • MD5

      d9d2c0b7e0a57368ba12cb8647dd6085

    • SHA1

      d5fa1f46d5b5b1aafe260d66666b96d2c82f429f

    • SHA256

      b10621fc52963f3018a5e9b084c37a837c3120f57ba33db6e246575cb1c0cfb2

    • SHA512

      5a4b1e6ad677b1aab74681541de414ade3d3026f7b0c70b6fffab267176b63acf337fe8ae994140e8aa530712a73708ab00990e9a22651e11cad71d020ac60cc

    • SSDEEP

      12288:KGrqNTd7xWlpdSFJcU+5Kys5ApySWrcRHI2N+GEdFSw3/7XREK/Du+s:KGqTdYcFmUmVs5Av8cRHI0EdRP7XzSR

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks