Overview

overview

10

Static

static

3

f495bf7822...18.exe

windows7-x64

10

f495bf7822...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f495bf78223aae2cf86c7848c0657671_JaffaCakes118

  • Size

    794KB

  • Sample

    240924-1w33laxgrl

  • MD5

    f495bf78223aae2cf86c7848c0657671

  • SHA1

    3569fd9c78fe3aa90ec5ee321165370198c66388

  • SHA256

    c969750f7c1ac45d3b7d191637b8794232d4b0b3d40925aacd39743185093b40

  • SHA512

    3e3f60812d22286e64bbbf9d96e9b8de7bcccad894adce3622c76eb7fc66097e1600c7f09b80a638007d8d2155182f5be721870509deb5f2c44ea9c5991b4356

  • SSDEEP

    24576:deTPoV3OKVC2EBRocVQIGxIH0mWPJWJPxojvLoJ7M7wiilQDhjCTcSE/HfiwZ6On:dZ4uFfW6GNwF

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f495bf78223aae2cf86c7848c0657671_JaffaCakes118

    • Size

      794KB

    • MD5

      f495bf78223aae2cf86c7848c0657671

    • SHA1

      3569fd9c78fe3aa90ec5ee321165370198c66388

    • SHA256

      c969750f7c1ac45d3b7d191637b8794232d4b0b3d40925aacd39743185093b40

    • SHA512

      3e3f60812d22286e64bbbf9d96e9b8de7bcccad894adce3622c76eb7fc66097e1600c7f09b80a638007d8d2155182f5be721870509deb5f2c44ea9c5991b4356

    • SSDEEP

      24576:deTPoV3OKVC2EBRocVQIGxIH0mWPJWJPxojvLoJ7M7wiilQDhjCTcSE/HfiwZ6On:dZ4uFfW6GNwF

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks