Overview

overview

10

Static

static

10

e991475382...18.exe

windows7-x64

10

e991475382...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9914753824f503e700ec74e219077f7_JaffaCakes118

  • Size

    62KB

  • Sample

    240918-vefyvasakh

  • MD5

    e9914753824f503e700ec74e219077f7

  • SHA1

    de4b97da5f4e6a804398553f33a23d03feee1a42

  • SHA256

    91814933cf6d7937616e776ecba937ca6a50d3c2e3fe332df12eb600592111e1

  • SHA512

    30cf6d57f2abe05eb38b34156daaae5e8a9a85a91cfaf5b42b9b527c0d942e876e551b86413b1d0394ad73fcc6e6d91236746c81d0adc32f0f3467c42b2c48bc

  • SSDEEP

    768:KIGaAuBMg7dYhlNC6MK3MrpEW1nsPUMp3ek7f0UbrAtXm7iM95Rx43XG35f5hg5f:HWdp3MNb1srOk1rARm7j/Rx4HGFcma

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e9914753824f503e700ec74e219077f7_JaffaCakes118

    • Size

      62KB

    • MD5

      e9914753824f503e700ec74e219077f7

    • SHA1

      de4b97da5f4e6a804398553f33a23d03feee1a42

    • SHA256

      91814933cf6d7937616e776ecba937ca6a50d3c2e3fe332df12eb600592111e1

    • SHA512

      30cf6d57f2abe05eb38b34156daaae5e8a9a85a91cfaf5b42b9b527c0d942e876e551b86413b1d0394ad73fcc6e6d91236746c81d0adc32f0f3467c42b2c48bc

    • SSDEEP

      768:KIGaAuBMg7dYhlNC6MK3MrpEW1nsPUMp3ek7f0UbrAtXm7iM95Rx43XG35f5hg5f:HWdp3MNb1srOk1rARm7j/Rx4HGFcma

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks