Overview

overview

10

Static

static

3

ea8111d834...18.exe

windows7-x64

10

ea8111d834...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea8111d834972295d1d9ac34965975f1_JaffaCakes118

  • Size

    903KB

  • Sample

    240919-d2216aydra

  • MD5

    ea8111d834972295d1d9ac34965975f1

  • SHA1

    1c146e7ee9008a33be437410c71501d3c54d98ee

  • SHA256

    1eb09c5375951ab6d1ee2ba7f5925c5e4a75461d2d6da4764c7444b4281e4650

  • SHA512

    cd014f3cd26d038f913af2e11d5d3b8de8fe8be841ab8f9a783474a2212bfc66962a3d644e573d8c383540b6ed68414a0089ed3b62dc630b54727c590e5ae7b6

  • SSDEEP

    24576:pc//////F6qGQAL22kYvjV6OLYvLhINfpA1F5J:pc//////LdAL22kJzmo1d

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ea8111d834972295d1d9ac34965975f1_JaffaCakes118

    • Size

      903KB

    • MD5

      ea8111d834972295d1d9ac34965975f1

    • SHA1

      1c146e7ee9008a33be437410c71501d3c54d98ee

    • SHA256

      1eb09c5375951ab6d1ee2ba7f5925c5e4a75461d2d6da4764c7444b4281e4650

    • SHA512

      cd014f3cd26d038f913af2e11d5d3b8de8fe8be841ab8f9a783474a2212bfc66962a3d644e573d8c383540b6ed68414a0089ed3b62dc630b54727c590e5ae7b6

    • SSDEEP

      24576:pc//////F6qGQAL22kYvjV6OLYvLhINfpA1F5J:pc//////LdAL22kJzmo1d

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks