Overview

overview

10

Static

static

3

dbaa553574...18.exe

windows7-x64

10

dbaa553574...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbaa553574f33e4a8ee6c2fdca2f6076_JaffaCakes118

  • Size

    632KB

  • Sample

    240912-c4l72sxakr

  • MD5

    dbaa553574f33e4a8ee6c2fdca2f6076

  • SHA1

    eeb44811e264daaa9761cb09b53ae58f300afd64

  • SHA256

    4bfc4058c12e43ed7130752046e90514ea396f7ceeb890dfb49b4a695017ad58

  • SHA512

    d49af8754b8c8895783879bb0fccd814681b64666f7a3118ae8a5c27e6d49466e7c7b51f58e4e8617dac3d410c261d83b7c3d305240705c367f1f7512f4eba1d

  • SSDEEP

    12288:DZrqHlBluDTLMnykCUZBUbHgWZgPWlq7m5QSqIbRIWEHQe18LQk9MDnoRXQ5Ily:D5CQDUykC0BUbWPWP5bXbRiHf180FCgF

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      dbaa553574f33e4a8ee6c2fdca2f6076_JaffaCakes118

    • Size

      632KB

    • MD5

      dbaa553574f33e4a8ee6c2fdca2f6076

    • SHA1

      eeb44811e264daaa9761cb09b53ae58f300afd64

    • SHA256

      4bfc4058c12e43ed7130752046e90514ea396f7ceeb890dfb49b4a695017ad58

    • SHA512

      d49af8754b8c8895783879bb0fccd814681b64666f7a3118ae8a5c27e6d49466e7c7b51f58e4e8617dac3d410c261d83b7c3d305240705c367f1f7512f4eba1d

    • SSDEEP

      12288:DZrqHlBluDTLMnykCUZBUbHgWZgPWlq7m5QSqIbRIWEHQe18LQk9MDnoRXQ5Ily:D5CQDUykC0BUbWPWP5bXbRiHf180FCgF

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks