Overview

overview

10

Static

static

3

e58ade57fa...18.exe

windows7-x64

1

e58ade57fa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e58ade57fa5a5eececacbe15d9850f43_JaffaCakes118

  • Size

    406KB

  • Sample

    240916-zj2tbsyfjj

  • MD5

    e58ade57fa5a5eececacbe15d9850f43

  • SHA1

    691a0672f4456c03665f2d79f54d755c1c711adb

  • SHA256

    4d5f347cba7f989deae0cbd27a4fb01f949e15fffd6bc9ab23976b6b5762d37d

  • SHA512

    5a816e590104224f1b890385c07e4097b0ccc5196c63ebe193411d82464acf7abba225e5ab1b47d69e6111759125dfeb478ef4046eff46b267283b0390ec094c

  • SSDEEP

    6144:3yTKmTb35nIadDMmESU0Uy+zraTl6ZX+c4kajzPa6MtVr291q3356ikiiTNn:KtJIIMmE1aTluZ4kajzPLM7SK33Npi5n

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e58ade57fa5a5eececacbe15d9850f43_JaffaCakes118

    • Size

      406KB

    • MD5

      e58ade57fa5a5eececacbe15d9850f43

    • SHA1

      691a0672f4456c03665f2d79f54d755c1c711adb

    • SHA256

      4d5f347cba7f989deae0cbd27a4fb01f949e15fffd6bc9ab23976b6b5762d37d

    • SHA512

      5a816e590104224f1b890385c07e4097b0ccc5196c63ebe193411d82464acf7abba225e5ab1b47d69e6111759125dfeb478ef4046eff46b267283b0390ec094c

    • SSDEEP

      6144:3yTKmTb35nIadDMmESU0Uy+zraTl6ZX+c4kajzPa6MtVr291q3356ikiiTNn:KtJIIMmE1aTluZ4kajzPLM7SK33Npi5n

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks