Overview

overview

10

Static

static

10

e82c1e8ddc...18.exe

windows7-x64

10

e82c1e8ddc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e82c1e8ddc2992e0757b84511604c6ee_JaffaCakes118

  • Size

    749KB

  • Sample

    240918-c7anesycrd

  • MD5

    e82c1e8ddc2992e0757b84511604c6ee

  • SHA1

    5845a030c4acb19f6e14e8dd38176cbddce9a45a

  • SHA256

    f38dc6c1274884084951e26f6a8e407d3ba1d8d08c71487d0cdb6c8e6ef60d6d

  • SHA512

    9271863ae173c4231fd05b1eacc359a8eb92dbc5bd155f33c5ec383722da8d0b604ae0c13cbfe067efbed261aa28b5afe5e85326e5ce55bda2d90ffb8cd4200c

  • SSDEEP

    12288:LkH96oZqhQ1FNA430e9YFgb1m7S4b9Gb17KORGpPATUhK:LkdRL3NAw1qaaSCkglPATUs

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e82c1e8ddc2992e0757b84511604c6ee_JaffaCakes118

    • Size

      749KB

    • MD5

      e82c1e8ddc2992e0757b84511604c6ee

    • SHA1

      5845a030c4acb19f6e14e8dd38176cbddce9a45a

    • SHA256

      f38dc6c1274884084951e26f6a8e407d3ba1d8d08c71487d0cdb6c8e6ef60d6d

    • SHA512

      9271863ae173c4231fd05b1eacc359a8eb92dbc5bd155f33c5ec383722da8d0b604ae0c13cbfe067efbed261aa28b5afe5e85326e5ce55bda2d90ffb8cd4200c

    • SSDEEP

      12288:LkH96oZqhQ1FNA430e9YFgb1m7S4b9Gb17KORGpPATUhK:LkdRL3NAw1qaaSCkglPATUs

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks