Overview

overview

10

Static

static

3

ed0133ad9f...18.exe

windows7-x64

10

ed0133ad9f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed0133ad9f3b391808812eba802cbfda_JaffaCakes118

  • Size

    262KB

  • Sample

    240920-g4btjashql

  • MD5

    ed0133ad9f3b391808812eba802cbfda

  • SHA1

    147295047fe53facf4376fccd8c63322bd2a609d

  • SHA256

    6e62ee6efbbc28df21db6a3ce1504a54f5d25dc7f948e209aa3c43f58b884989

  • SHA512

    09e47d4c9c3f64c483812aa3bad96528b602fa1e82c1483e4d35135daaac8d15a680bb7ae96b0f2ec62367df5bbdabab3207a653f2e44b50f8e8afdd74ba2377

  • SSDEEP

    6144:o0iKbTXzbHWfCoPuPpfV/4KgK3maLZwcMkXPxm9tn:o0nTv2fnuRfVQLKWaOcD8tn

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ed0133ad9f3b391808812eba802cbfda_JaffaCakes118

    • Size

      262KB

    • MD5

      ed0133ad9f3b391808812eba802cbfda

    • SHA1

      147295047fe53facf4376fccd8c63322bd2a609d

    • SHA256

      6e62ee6efbbc28df21db6a3ce1504a54f5d25dc7f948e209aa3c43f58b884989

    • SHA512

      09e47d4c9c3f64c483812aa3bad96528b602fa1e82c1483e4d35135daaac8d15a680bb7ae96b0f2ec62367df5bbdabab3207a653f2e44b50f8e8afdd74ba2377

    • SSDEEP

      6144:o0iKbTXzbHWfCoPuPpfV/4KgK3maLZwcMkXPxm9tn:o0nTv2fnuRfVQLKWaOcD8tn

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks