Overview

overview

10

Static

static

3

eb784f224b...18.exe

windows7-x64

10

eb784f224b...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb784f224b2a3a748c402cd9888c5975_JaffaCakes118

  • Size

    852KB

  • Sample

    240919-q61p4s1gng

  • MD5

    eb784f224b2a3a748c402cd9888c5975

  • SHA1

    a3bbc3b7d0d667832cf85d3124464d811737e9b1

  • SHA256

    b1a3c29e2fb81855d6bc540243ccbf215d7baa75b3675d306dd4937825e83267

  • SHA512

    48fadfcaf6ac62b4ad4913d6b5c41f87037f695bffd6b07feac832ababb2915c26824875708d1ca869103677dea1a030529699598a68629fa025a1d948977557

  • SSDEEP

    12288:wVCvN53f0cwbd4smgNf4ItP2q/J+fjqrxKyOsnDgVTFqCncSgC:lf0/d/xxU+7KywVT7cs

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      eb784f224b2a3a748c402cd9888c5975_JaffaCakes118

    • Size

      852KB

    • MD5

      eb784f224b2a3a748c402cd9888c5975

    • SHA1

      a3bbc3b7d0d667832cf85d3124464d811737e9b1

    • SHA256

      b1a3c29e2fb81855d6bc540243ccbf215d7baa75b3675d306dd4937825e83267

    • SHA512

      48fadfcaf6ac62b4ad4913d6b5c41f87037f695bffd6b07feac832ababb2915c26824875708d1ca869103677dea1a030529699598a68629fa025a1d948977557

    • SSDEEP

      12288:wVCvN53f0cwbd4smgNf4ItP2q/J+fjqrxKyOsnDgVTFqCncSgC:lf0/d/xxU+7KywVT7cs

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks