Overview

overview

10

Static

static

3

ea1ca36dc6...18.exe

windows7-x64

10

ea1ca36dc6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea1ca36dc6059533ed49def396d86311_JaffaCakes118

  • Size

    291KB

  • Sample

    240918-2p7b4sxbnb

  • MD5

    ea1ca36dc6059533ed49def396d86311

  • SHA1

    6dd6a2f7ace1ead7b0bb4ecc695f97ec8b621e4b

  • SHA256

    c56e5555cd7fb723c4fea7878fc15134adc0f2b57dc2cef80317d9eedad38f27

  • SHA512

    be716243fc937afd42935e677a904a659f250ffc602f9e7d6d15bc275328ff8e8afda9d568c974c4cad04bdd24bf68220d01186fdaab95311fe894736dcd1b4c

  • SSDEEP

    6144:Wp0sbQ+xJ5vYXj1zULIPtIibYl2YLtDW76HHo9Uhh8veCzxMJGbC45:Tsbz5ej9ULIPtIibYdD06nWUhmVzx

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ea1ca36dc6059533ed49def396d86311_JaffaCakes118

    • Size

      291KB

    • MD5

      ea1ca36dc6059533ed49def396d86311

    • SHA1

      6dd6a2f7ace1ead7b0bb4ecc695f97ec8b621e4b

    • SHA256

      c56e5555cd7fb723c4fea7878fc15134adc0f2b57dc2cef80317d9eedad38f27

    • SHA512

      be716243fc937afd42935e677a904a659f250ffc602f9e7d6d15bc275328ff8e8afda9d568c974c4cad04bdd24bf68220d01186fdaab95311fe894736dcd1b4c

    • SSDEEP

      6144:Wp0sbQ+xJ5vYXj1zULIPtIibYl2YLtDW76HHo9Uhh8veCzxMJGbC45:Tsbz5ej9ULIPtIibYdD06nWUhmVzx

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks