Overview

overview

10

Static

static

3

f83a0b168d...18.exe

windows7-x64

10

f83a0b168d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f83a0b168d32e4d40f59bfc25e0bb63a_JaffaCakes118

  • Size

    481KB

  • Sample

    240926-m4tl8sxakb

  • MD5

    f83a0b168d32e4d40f59bfc25e0bb63a

  • SHA1

    7edd040701b90f04bb53f8d38289c7e3fce6f0a5

  • SHA256

    413be11693ba6eb58843857651f02d19eed8d47381de480898e4bf54ab809d36

  • SHA512

    d6fbfc6b8272b76add40c8bb8183e1308c9880d99a6f5e00aa7dc865e4aff7e7331d3718f55c305aa25b1f3a7672fbc962fabf863e5769b6a2c9f6d1c22bd605

  • SSDEEP

    12288:VX2Snj9WrvJzb9tLimxAbiyvuQ2zGuUKQCtO8bu:l2Snj9iv1b9tLPAba6uQoOeu

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f83a0b168d32e4d40f59bfc25e0bb63a_JaffaCakes118

    • Size

      481KB

    • MD5

      f83a0b168d32e4d40f59bfc25e0bb63a

    • SHA1

      7edd040701b90f04bb53f8d38289c7e3fce6f0a5

    • SHA256

      413be11693ba6eb58843857651f02d19eed8d47381de480898e4bf54ab809d36

    • SHA512

      d6fbfc6b8272b76add40c8bb8183e1308c9880d99a6f5e00aa7dc865e4aff7e7331d3718f55c305aa25b1f3a7672fbc962fabf863e5769b6a2c9f6d1c22bd605

    • SSDEEP

      12288:VX2Snj9WrvJzb9tLimxAbiyvuQ2zGuUKQCtO8bu:l2Snj9iv1b9tLPAba6uQoOeu

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks