Overview

overview

10

Static

static

3

f4084c33a4...18.exe

windows7-x64

10

f4084c33a4...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4084c33a49c16a0339d71772d3a11fb_JaffaCakes118

  • Size

    1.6MB

  • Sample

    240924-tszsfasfnn

  • MD5

    f4084c33a49c16a0339d71772d3a11fb

  • SHA1

    462230e8d2fa7d5fc195892349907b6386db701d

  • SHA256

    0f71621d9ec1f4eb7f7c0e6f177dcd71b82be33215cb388945526bd8ef1a5644

  • SHA512

    0b1629762b7009361cd204f65751a85236bfa8366de91e30ab154c0b0f5b15adf0985ba94eb5495342213c9164b6b0c1b0098a00fbeece02c47f062f183e4fac

  • SSDEEP

    24576:iO1FKbDG4PXrUM67fEGUwxwWUwkmMOZODNB4EzulblYkK/vfN9hqURx039Ctr7ec:ihDL4wjWMNgbBK/XFqrteEzXovjGLgh

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      f4084c33a49c16a0339d71772d3a11fb_JaffaCakes118

    • Size

      1.6MB

    • MD5

      f4084c33a49c16a0339d71772d3a11fb

    • SHA1

      462230e8d2fa7d5fc195892349907b6386db701d

    • SHA256

      0f71621d9ec1f4eb7f7c0e6f177dcd71b82be33215cb388945526bd8ef1a5644

    • SHA512

      0b1629762b7009361cd204f65751a85236bfa8366de91e30ab154c0b0f5b15adf0985ba94eb5495342213c9164b6b0c1b0098a00fbeece02c47f062f183e4fac

    • SSDEEP

      24576:iO1FKbDG4PXrUM67fEGUwxwWUwkmMOZODNB4EzulblYkK/vfN9hqURx039Ctr7ec:ihDL4wjWMNgbBK/XFqrteEzXovjGLgh

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks