Overview

overview

10

Static

static

3

f8bef19923...18.exe

windows7-x64

1

f8bef19923...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8bef19923bf4a89ab8275887e33faf7_JaffaCakes118

  • Size

    377KB

  • Sample

    240926-tqwb8swerj

  • MD5

    f8bef19923bf4a89ab8275887e33faf7

  • SHA1

    e8188bdf2494b3e51266718f83a00583c8084fb0

  • SHA256

    c295c0adc3f0396282ab95edd7e446164cabd7de17e6252152926f54010cebd0

  • SHA512

    b29d8ece97ad477c879b9306d52193c217ff5532dd7fd8593feae2a43da83f576fddb4352b1c9b0362bc8c35db210b699340be0b435b7f9f848030c6d1096b52

  • SSDEEP

    6144:eijDE9HbDieWYyy7ks5Dos2aAy1nH7RKQe2ZMEKhR83o5/NXOgRLO9lt0MO4KpFh:eSDwHb0YN4+0uAy1b8UOEKAY5VX5RLOa

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f8bef19923bf4a89ab8275887e33faf7_JaffaCakes118

    • Size

      377KB

    • MD5

      f8bef19923bf4a89ab8275887e33faf7

    • SHA1

      e8188bdf2494b3e51266718f83a00583c8084fb0

    • SHA256

      c295c0adc3f0396282ab95edd7e446164cabd7de17e6252152926f54010cebd0

    • SHA512

      b29d8ece97ad477c879b9306d52193c217ff5532dd7fd8593feae2a43da83f576fddb4352b1c9b0362bc8c35db210b699340be0b435b7f9f848030c6d1096b52

    • SSDEEP

      6144:eijDE9HbDieWYyy7ks5Dos2aAy1nH7RKQe2ZMEKhR83o5/NXOgRLO9lt0MO4KpFh:eSDwHb0YN4+0uAy1b8UOEKAY5VX5RLOa

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks