Overview

overview

10

Static

static

10

f2f3604c86...18.exe

windows7-x64

10

f2f3604c86...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2f3604c8623735234aab5b707977fbc_JaffaCakes118

  • Size

    796KB

  • Sample

    240923-x1ec9aybqn

  • MD5

    f2f3604c8623735234aab5b707977fbc

  • SHA1

    abc87a78f4a49cc60fdf03e48a2213d6c2b45e8d

  • SHA256

    565803163ca6ad0880f9ac664b2f023509004eb775c2e075bbc1e102da24e7ee

  • SHA512

    d080fae25d2f08f8902da87ab31a059356145a1c9acddb8865f861ad98a5dd3b594d034a340a82a072dd078aec9747277ccff0b930a976d3710133184d20009f

  • SSDEEP

    24576:HWUY31BRvxg+cx70F2/P8710EsHY4XO3bI:m1TZPFE8FsHTXr

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f2f3604c8623735234aab5b707977fbc_JaffaCakes118

    • Size

      796KB

    • MD5

      f2f3604c8623735234aab5b707977fbc

    • SHA1

      abc87a78f4a49cc60fdf03e48a2213d6c2b45e8d

    • SHA256

      565803163ca6ad0880f9ac664b2f023509004eb775c2e075bbc1e102da24e7ee

    • SHA512

      d080fae25d2f08f8902da87ab31a059356145a1c9acddb8865f861ad98a5dd3b594d034a340a82a072dd078aec9747277ccff0b930a976d3710133184d20009f

    • SSDEEP

      24576:HWUY31BRvxg+cx70F2/P8710EsHY4XO3bI:m1TZPFE8FsHTXr

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks