Overview

overview

10

Static

static

10

f2ea352e8b...18.exe

windows7-x64

10

f2ea352e8b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2ea352e8be0c77a7d5ae2c596fd928e_JaffaCakes118

  • Size

    733KB

  • Sample

    240923-xk5v9sxemn

  • MD5

    f2ea352e8be0c77a7d5ae2c596fd928e

  • SHA1

    35752bb1a828a42ab6aeee3a873b436619f7be9a

  • SHA256

    22fed9f230e7ea1c3e5752f989836caf6df474e1a01e638ad9fd45ad0ced4dfe

  • SHA512

    4d59b426d5bf0fc67ed6a239f717569bbdecf165f9b4b1261c2d143f96462b53c7d2ab583f30f40c0b9940e4dfffb4e668783927cb40c436c8020ffc67422ff7

  • SSDEEP

    12288:1Eqa1DY6yxb+kINeCrJcrQ+CWkr3zslRtG8uKCsnEOOZqtXJazmiTRWdHoF4K:1HgDeJCVcrQYOQlRtfxlazmiTRkIFb

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f2ea352e8be0c77a7d5ae2c596fd928e_JaffaCakes118

    • Size

      733KB

    • MD5

      f2ea352e8be0c77a7d5ae2c596fd928e

    • SHA1

      35752bb1a828a42ab6aeee3a873b436619f7be9a

    • SHA256

      22fed9f230e7ea1c3e5752f989836caf6df474e1a01e638ad9fd45ad0ced4dfe

    • SHA512

      4d59b426d5bf0fc67ed6a239f717569bbdecf165f9b4b1261c2d143f96462b53c7d2ab583f30f40c0b9940e4dfffb4e668783927cb40c436c8020ffc67422ff7

    • SSDEEP

      12288:1Eqa1DY6yxb+kINeCrJcrQ+CWkr3zslRtG8uKCsnEOOZqtXJazmiTRWdHoF4K:1HgDeJCVcrQYOQlRtfxlazmiTRkIFb

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks