Overview

overview

10

Static

static

10

df35037f55...18.exe

windows7-x64

10

df35037f55...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df35037f5517992c58f2d45b18d1bb9d_JaffaCakes118

  • Size

    605KB

  • Sample

    240914-bbhtgsycpk

  • MD5

    df35037f5517992c58f2d45b18d1bb9d

  • SHA1

    f835a768df9c37ffe13e02dd0829307b856b0268

  • SHA256

    c9068e2443823562335856aced404b0faffe68589abe04f91d295cb634630f73

  • SHA512

    ceaffe3afa4f24daee5dde2cd6029cb9f1ef9f1e51080a614e3238fb6058a956d8a338718e075f7dabd758d85856d6aa7f3ce29156d6c723808f79f39ca8b96b

  • SSDEEP

    12288:Xoz6A+y1vbS+Vnjz936iOHQMkcB8DspBHYBufIk994jfRq:DA11vbS+VjZdWQMklQpBHYQfD94jf

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      df35037f5517992c58f2d45b18d1bb9d_JaffaCakes118

    • Size

      605KB

    • MD5

      df35037f5517992c58f2d45b18d1bb9d

    • SHA1

      f835a768df9c37ffe13e02dd0829307b856b0268

    • SHA256

      c9068e2443823562335856aced404b0faffe68589abe04f91d295cb634630f73

    • SHA512

      ceaffe3afa4f24daee5dde2cd6029cb9f1ef9f1e51080a614e3238fb6058a956d8a338718e075f7dabd758d85856d6aa7f3ce29156d6c723808f79f39ca8b96b

    • SSDEEP

      12288:Xoz6A+y1vbS+Vnjz936iOHQMkcB8DspBHYBufIk994jfRq:DA11vbS+VjZdWQMklQpBHYQfD94jf

    Score
    10/10
    modiloadertrojandiscovery

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks