Overview

overview

10

Static

static

1

ea5cadc4d6...18.exe

windows7-x64

10

ea5cadc4d6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea5cadc4d6e74779f0416c96c9e58d5e_JaffaCakes118

  • Size

    450KB

  • Sample

    240919-b6pwaavbqm

  • MD5

    ea5cadc4d6e74779f0416c96c9e58d5e

  • SHA1

    c01d2714cafaa576aa292c3ab9973c256fc65f89

  • SHA256

    7d46ce93f630a8c850333984f1da85ffdfdce4d9d44ac838573c2a021cc7756a

  • SHA512

    5514e93314135d340754d670b6db509dad8003405a38dab4ff7d9aa68ea105ecb9cdc0705e15b7b62be2c72afcde094f0fa79485faff5c10cb41f44844113026

  • SSDEEP

    6144:qRxPJ9AK2LvH4zvXxC5DeJXwhzVeHpJ8STjG4C3e7CgeQhhIV+tdYSSf9wPROVb:qRxxnpweBwj4k9J3/JVE+Vqpwb

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ea5cadc4d6e74779f0416c96c9e58d5e_JaffaCakes118

    • Size

      450KB

    • MD5

      ea5cadc4d6e74779f0416c96c9e58d5e

    • SHA1

      c01d2714cafaa576aa292c3ab9973c256fc65f89

    • SHA256

      7d46ce93f630a8c850333984f1da85ffdfdce4d9d44ac838573c2a021cc7756a

    • SHA512

      5514e93314135d340754d670b6db509dad8003405a38dab4ff7d9aa68ea105ecb9cdc0705e15b7b62be2c72afcde094f0fa79485faff5c10cb41f44844113026

    • SSDEEP

      6144:qRxPJ9AK2LvH4zvXxC5DeJXwhzVeHpJ8STjG4C3e7CgeQhhIV+tdYSSf9wPROVb:qRxxnpweBwj4k9J3/JVE+Vqpwb

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks