Overview

overview

10

Static

static

3

e679a03f7f...18.exe

windows7-x64

1

e679a03f7f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e679a03f7f0346cd6a97137e6511acb8_JaffaCakes118

  • Size

    450KB

  • Sample

    240917-kztqbsvcld

  • MD5

    e679a03f7f0346cd6a97137e6511acb8

  • SHA1

    a418ec395bf0212abe7140eceb83ed44d3819b45

  • SHA256

    4fcaf5c20c4c0090bca401996589dc234b593d73a22feff63ac5fb975149709c

  • SHA512

    dd12f66b8006fc56fe123c04176d1e1e76221f4aa0c55f6e8657a46e0bbbac35661e416285926c73b79ecb4f115207b715a058e660449c8da3d16812eee8c557

  • SSDEEP

    6144:d9yQ1agWkuWhDLUOUU12prY2isO+iwH8oAhzh1Y1p70Myol20YdpvfJRnu:/y24kuALRUU1MQsZ3is70My+lYpZ

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e679a03f7f0346cd6a97137e6511acb8_JaffaCakes118

    • Size

      450KB

    • MD5

      e679a03f7f0346cd6a97137e6511acb8

    • SHA1

      a418ec395bf0212abe7140eceb83ed44d3819b45

    • SHA256

      4fcaf5c20c4c0090bca401996589dc234b593d73a22feff63ac5fb975149709c

    • SHA512

      dd12f66b8006fc56fe123c04176d1e1e76221f4aa0c55f6e8657a46e0bbbac35661e416285926c73b79ecb4f115207b715a058e660449c8da3d16812eee8c557

    • SSDEEP

      6144:d9yQ1agWkuWhDLUOUU12prY2isO+iwH8oAhzh1Y1p70Myol20YdpvfJRnu:/y24kuALRUU1MQsZ3is70My+lYpZ

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks