Overview

overview

10

Static

static

10

edbc4440e6...18.exe

windows7-x64

10

edbc4440e6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edbc4440e64a7c05b258561ec2148576_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240920-q892kazfrm

  • MD5

    edbc4440e64a7c05b258561ec2148576

  • SHA1

    dc0678e3e227c31f03aa6feacecb40bc17f9c5f2

  • SHA256

    77f26fe3ebaccb959a03d159317aa6fb007bd17aa88fa8aea8cdb1afa01adc51

  • SHA512

    10c51726d714a4f2ac1b392bcd6199ea6c233c1abca53c5d7e4fdd5e12d8c7bf007d616c149e8f9e1f8d3f94031db8018809febe2e3d469cb13ee5eb73d70e74

  • SSDEEP

    24576:4lP4VWUxwJMNQKNuy54IOsCq9lfnwv7ArWZSt3cxzCRTHxQ6xH4/CU15sVtw/e:4lPxEG+1ht1n0AKZSt4zUCEHWZcqe

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      edbc4440e64a7c05b258561ec2148576_JaffaCakes118

    • Size

      1.5MB

    • MD5

      edbc4440e64a7c05b258561ec2148576

    • SHA1

      dc0678e3e227c31f03aa6feacecb40bc17f9c5f2

    • SHA256

      77f26fe3ebaccb959a03d159317aa6fb007bd17aa88fa8aea8cdb1afa01adc51

    • SHA512

      10c51726d714a4f2ac1b392bcd6199ea6c233c1abca53c5d7e4fdd5e12d8c7bf007d616c149e8f9e1f8d3f94031db8018809febe2e3d469cb13ee5eb73d70e74

    • SSDEEP

      24576:4lP4VWUxwJMNQKNuy54IOsCq9lfnwv7ArWZSt3cxzCRTHxQ6xH4/CU15sVtw/e:4lPxEG+1ht1n0AKZSt4zUCEHWZcqe

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks