Overview

overview

10

Static

static

3

fd7225f807...18.exe

windows7-x64

10

fd7225f807...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd7225f807e7f1fa8a6a86abe609176c_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240929-arbjnssell

  • MD5

    fd7225f807e7f1fa8a6a86abe609176c

  • SHA1

    1704842228f00180abc49b42b05b275fd0c07b25

  • SHA256

    b0b63734b8d7509267d40fe6a55077976921c2b3ef4c024a6b4e029f1fb1adec

  • SHA512

    27781b9bd9795f024225001525c740ba3eaaa9a542926d7194b06ed4a4d070febaf58a3e311a93198cc395657aae3bb8b0188add061600289dc7d62b4accd2f7

  • SSDEEP

    49152:jqaBmW2rDAVVRVs0Qg3kbY7h+I+NHdJuZVgYCZUZjzF4cMHZPbV1Gng:Ov9reVkg3kMYI+NbuZzIUZ6VJ1Kg

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      fd7225f807e7f1fa8a6a86abe609176c_JaffaCakes118

    • Size

      2.2MB

    • MD5

      fd7225f807e7f1fa8a6a86abe609176c

    • SHA1

      1704842228f00180abc49b42b05b275fd0c07b25

    • SHA256

      b0b63734b8d7509267d40fe6a55077976921c2b3ef4c024a6b4e029f1fb1adec

    • SHA512

      27781b9bd9795f024225001525c740ba3eaaa9a542926d7194b06ed4a4d070febaf58a3e311a93198cc395657aae3bb8b0188add061600289dc7d62b4accd2f7

    • SSDEEP

      49152:jqaBmW2rDAVVRVs0Qg3kbY7h+I+NHdJuZVgYCZUZjzF4cMHZPbV1Gng:Ov9reVkg3kMYI+NbuZzIUZ6VJ1Kg

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks