Overview

overview

10

Static

static

10

e1f720d5f3...18.exe

windows7-x64

10

e1f720d5f3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1f720d5f35898661142804b4c66f3e6_JaffaCakes118

  • Size

    848KB

  • Sample

    240915-h49w1ascpn

  • MD5

    e1f720d5f35898661142804b4c66f3e6

  • SHA1

    0e6f46e0cc3c28a2feebff57222e6c16c3af9846

  • SHA256

    c9c6bb4c7eeec0784756ff83b404e6c9f9c0ed30f2faf37ce9fdbe7137831971

  • SHA512

    d6420071f7052901c6ffa0b7e0d3266ff9c59e842d7a66395664438c5a23f7917c8debd78621364df74f6ae302c2b5e86836cd7a58ebdf5ddc53c5432f586dd9

  • SSDEEP

    12288:pSltGgozqi5paO0lp9USQVUSyrkA4RZ6J+v5NdTgxWaSTAbu:p02eas1USImaRIwPuIaSTN

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e1f720d5f35898661142804b4c66f3e6_JaffaCakes118

    • Size

      848KB

    • MD5

      e1f720d5f35898661142804b4c66f3e6

    • SHA1

      0e6f46e0cc3c28a2feebff57222e6c16c3af9846

    • SHA256

      c9c6bb4c7eeec0784756ff83b404e6c9f9c0ed30f2faf37ce9fdbe7137831971

    • SHA512

      d6420071f7052901c6ffa0b7e0d3266ff9c59e842d7a66395664438c5a23f7917c8debd78621364df74f6ae302c2b5e86836cd7a58ebdf5ddc53c5432f586dd9

    • SSDEEP

      12288:pSltGgozqi5paO0lp9USQVUSyrkA4RZ6J+v5NdTgxWaSTAbu:p02eas1USImaRIwPuIaSTN

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks