Overview

overview

10

Static

static

3

ede32ce888...18.exe

windows7-x64

10

ede32ce888...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ede32ce888b8ef31c8552d5bc830045a_JaffaCakes118

  • Size

    435KB

  • Sample

    240920-swl53stfqp

  • MD5

    ede32ce888b8ef31c8552d5bc830045a

  • SHA1

    9bc8db120928bff4a4140d5bb6085b7da2236a43

  • SHA256

    01d179e48ebdf25bd7071c48e1dba48d568803681f2ae0582b2395ab36dbc06b

  • SHA512

    a1264a772adce14dfe8005ed8482014934a761288cdc43261e6fc7548dadd2067b01239a003159270108c40701cab552af0e9ded01fe34f883d19a09830499d5

  • SSDEEP

    12288:NUPQzjDTscjE9JjvtBEqYWW2tBTCtgMRvqib:N+QTTsispvtjCpRvqib

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ede32ce888b8ef31c8552d5bc830045a_JaffaCakes118

    • Size

      435KB

    • MD5

      ede32ce888b8ef31c8552d5bc830045a

    • SHA1

      9bc8db120928bff4a4140d5bb6085b7da2236a43

    • SHA256

      01d179e48ebdf25bd7071c48e1dba48d568803681f2ae0582b2395ab36dbc06b

    • SHA512

      a1264a772adce14dfe8005ed8482014934a761288cdc43261e6fc7548dadd2067b01239a003159270108c40701cab552af0e9ded01fe34f883d19a09830499d5

    • SSDEEP

      12288:NUPQzjDTscjE9JjvtBEqYWW2tBTCtgMRvqib:N+QTTsispvtjCpRvqib

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks