Overview

overview

10

Static

static

3

e527d611f4...18.exe

windows7-x64

10

e527d611f4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e527d611f42f1473a3d858ce81af35f2_JaffaCakes118

  • Size

    592KB

  • Sample

    240916-txtf8axeka

  • MD5

    e527d611f42f1473a3d858ce81af35f2

  • SHA1

    61d7dff1843bf91696ee48f71e1c8aafe950c7bc

  • SHA256

    9f103cc511813d892dd99048250a8215afb65dc1897db82a8da5cd682cacb7a5

  • SHA512

    18626a08933f2eb5cfeb3fe406526b14cfa6aa31b2deb5ded6d01f48226100dc3189296934be26d9c4bba334541d00f2383460c8456a85d029de3e5ef1073fc4

  • SSDEEP

    12288:tBnMPxpe5awaUa0e1+wwbc+qCHnD1c2obY7cBC1h9GQGv:thExmel1+wwoUocHev

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e527d611f42f1473a3d858ce81af35f2_JaffaCakes118

    • Size

      592KB

    • MD5

      e527d611f42f1473a3d858ce81af35f2

    • SHA1

      61d7dff1843bf91696ee48f71e1c8aafe950c7bc

    • SHA256

      9f103cc511813d892dd99048250a8215afb65dc1897db82a8da5cd682cacb7a5

    • SHA512

      18626a08933f2eb5cfeb3fe406526b14cfa6aa31b2deb5ded6d01f48226100dc3189296934be26d9c4bba334541d00f2383460c8456a85d029de3e5ef1073fc4

    • SSDEEP

      12288:tBnMPxpe5awaUa0e1+wwbc+qCHnD1c2obY7cBC1h9GQGv:thExmel1+wwoUocHev

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks