Overview

overview

10

Static

static

3

e76d152c70...18.exe

windows7-x64

10

e76d152c70...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e76d152c706b768ab93ba218bcdb9513_JaffaCakes118

  • Size

    145KB

  • Sample

    240921-yb1qmazckj

  • MD5

    e76d152c706b768ab93ba218bcdb9513

  • SHA1

    06bca6481bce3fd076e6b371d2a98405f3d8e5b9

  • SHA256

    122a50e21fb0cb7237c78cbd9a99ae16f2858d6336ae343afced97d06268ab99

  • SHA512

    eb0d3295aaebb3e9f1d0e27c6f58089dd70434313adac67707aa12153620d32a529f3f6fb918a1b3ccee8a77b3bb66b12d4045d30ccf20e877b5170a07f7d165

  • SSDEEP

    3072:mJvS5cyJn9iN0NuX+9MDzijRDWcBGEnx3m0XakCs84AddMxWxYp9:8vSKyJn0qHc4GEx3msaJ4AddMWY

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e76d152c706b768ab93ba218bcdb9513_JaffaCakes118

    • Size

      145KB

    • MD5

      e76d152c706b768ab93ba218bcdb9513

    • SHA1

      06bca6481bce3fd076e6b371d2a98405f3d8e5b9

    • SHA256

      122a50e21fb0cb7237c78cbd9a99ae16f2858d6336ae343afced97d06268ab99

    • SHA512

      eb0d3295aaebb3e9f1d0e27c6f58089dd70434313adac67707aa12153620d32a529f3f6fb918a1b3ccee8a77b3bb66b12d4045d30ccf20e877b5170a07f7d165

    • SSDEEP

      3072:mJvS5cyJn9iN0NuX+9MDzijRDWcBGEnx3m0XakCs84AddMxWxYp9:8vSKyJn0qHc4GEx3msaJ4AddMWY

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks