Overview

overview

10

Static

static

3

dc1499f2cd...18.exe

windows7-x64

10

dc1499f2cd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc1499f2cd9ff70637e4e446a168e82c_JaffaCakes118

  • Size

    263KB

  • Sample

    240912-jfrwysyckh

  • MD5

    dc1499f2cd9ff70637e4e446a168e82c

  • SHA1

    30c7970e4bb515a3c40cec18cdf6afda91ce79e4

  • SHA256

    7c816f5f58d4c732bc321e4a059877827952f6448305929630d34b1efc72c0da

  • SHA512

    7fefef9e4a1254758725ac150e34a7e9138f3648eff927d44ae66425f64b761706997fe2a5b16c182f28f1671b7c08ef4bd7c0a30999303efe5c196733e68bf4

  • SSDEEP

    6144:pt0TZbUFbRKHZCJ9ZXmhawDIVJ3uNgHYn+qR5rh:ITZbUCZCtXua8VWO+A59

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      dc1499f2cd9ff70637e4e446a168e82c_JaffaCakes118

    • Size

      263KB

    • MD5

      dc1499f2cd9ff70637e4e446a168e82c

    • SHA1

      30c7970e4bb515a3c40cec18cdf6afda91ce79e4

    • SHA256

      7c816f5f58d4c732bc321e4a059877827952f6448305929630d34b1efc72c0da

    • SHA512

      7fefef9e4a1254758725ac150e34a7e9138f3648eff927d44ae66425f64b761706997fe2a5b16c182f28f1671b7c08ef4bd7c0a30999303efe5c196733e68bf4

    • SSDEEP

      6144:pt0TZbUFbRKHZCJ9ZXmhawDIVJ3uNgHYn+qR5rh:ITZbUCZCtXua8VWO+A59

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks