Overview

overview

10

Static

static

3

e43ee351a7...18.exe

windows7-x64

10

e43ee351a7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e43ee351a7e0172dba63ebd5608ddc0b_JaffaCakes118

  • Size

    266KB

  • Sample

    240916-hv8btavcnj

  • MD5

    e43ee351a7e0172dba63ebd5608ddc0b

  • SHA1

    8788eac3f52a2428c91c9343f80a688361ef89f3

  • SHA256

    825a372fd4302d2ef94d829cd91fcc94eef1e6cdf5fb4fc7eb44dac5733c85cf

  • SHA512

    b7545ee1d8c95895d224e3423c27eee7cc64f268afbba44a265077078fe5c3b72897f8b33f689064703c95ac17982a208b9f06ee904b0cb4b103778a72a55d4a

  • SSDEEP

    6144:CivB0mnf76HZEGUWMWU3ayxJKuCkh/xJkD8ol4Rj2BuQe4UTdX:pmmnfuu/BWobKuXhEd4Rj2BOdX

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e43ee351a7e0172dba63ebd5608ddc0b_JaffaCakes118

    • Size

      266KB

    • MD5

      e43ee351a7e0172dba63ebd5608ddc0b

    • SHA1

      8788eac3f52a2428c91c9343f80a688361ef89f3

    • SHA256

      825a372fd4302d2ef94d829cd91fcc94eef1e6cdf5fb4fc7eb44dac5733c85cf

    • SHA512

      b7545ee1d8c95895d224e3423c27eee7cc64f268afbba44a265077078fe5c3b72897f8b33f689064703c95ac17982a208b9f06ee904b0cb4b103778a72a55d4a

    • SSDEEP

      6144:CivB0mnf76HZEGUWMWU3ayxJKuCkh/xJkD8ol4Rj2BuQe4UTdX:pmmnfuu/BWobKuXhEd4Rj2BOdX

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks