Overview

overview

10

Static

static

3

e52e7c0d44...18.exe

windows7-x64

10

e52e7c0d44...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e52e7c0d443fb3cc06fda2be8c9996c4_JaffaCakes118

  • Size

    8KB

  • Sample

    240916-t8glssybkg

  • MD5

    e52e7c0d443fb3cc06fda2be8c9996c4

  • SHA1

    0f9966b5230ec8241a1c34c6990de8fecdf9be57

  • SHA256

    578894c812c60c263bf08006bd94e0ed53471f66694aa41e90ed7db1f8bf2491

  • SHA512

    39900da6be13c73e16a66a936dbcf2edd49a58f868ea1e07f9fc422b377683ca788d7637b1f1ab0d0dc9b96bef378cebbd10182b35fab9787c543de2a0a126ed

  • SSDEEP

    192:HaM6yxSdp+v1qgBLMkFhWeyddOnuYYmRV8kdDlBfnDRwRJ6/:HGyxSf+vRBLXzyddsPjPPfuRJ6/

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e52e7c0d443fb3cc06fda2be8c9996c4_JaffaCakes118

    • Size

      8KB

    • MD5

      e52e7c0d443fb3cc06fda2be8c9996c4

    • SHA1

      0f9966b5230ec8241a1c34c6990de8fecdf9be57

    • SHA256

      578894c812c60c263bf08006bd94e0ed53471f66694aa41e90ed7db1f8bf2491

    • SHA512

      39900da6be13c73e16a66a936dbcf2edd49a58f868ea1e07f9fc422b377683ca788d7637b1f1ab0d0dc9b96bef378cebbd10182b35fab9787c543de2a0a126ed

    • SSDEEP

      192:HaM6yxSdp+v1qgBLMkFhWeyddOnuYYmRV8kdDlBfnDRwRJ6/:HGyxSf+vRBLXzyddsPjPPfuRJ6/

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks