Overview

overview

10

Static

static

10

26956119a0...18.exe

windows7-x64

10

26956119a0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    26956119a00dcb8611280ee6af38d5d3_JaffaCakes118

  • Size

    42KB

  • Sample

    241008-2n1g6svcnn

  • MD5

    26956119a00dcb8611280ee6af38d5d3

  • SHA1

    f7b2df342f001c5921217b7ffed443a9cccc9867

  • SHA256

    c0cb1fed4bfc8b6be8f64617a7447ecebc21db2a3c4742191e434e59707b0798

  • SHA512

    25f3473aa262971c310c16ab6f3289572e0a51cded06b7ee782d7b05e51253bea18370b97937b8a5b1f8448e1734bd601fc45c7f9c830f011b28e3c45e923c9c

  • SSDEEP

    768:iznYqKUQcDwsREqcUI1OlMr3dGarLIA7J1v/Q7VyNctwZAy+ur9kZhB8dGaDCqY8:irYqKUQACT/clMr3dGarLIA7J1v/Q7Vo

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      26956119a00dcb8611280ee6af38d5d3_JaffaCakes118

    • Size

      42KB

    • MD5

      26956119a00dcb8611280ee6af38d5d3

    • SHA1

      f7b2df342f001c5921217b7ffed443a9cccc9867

    • SHA256

      c0cb1fed4bfc8b6be8f64617a7447ecebc21db2a3c4742191e434e59707b0798

    • SHA512

      25f3473aa262971c310c16ab6f3289572e0a51cded06b7ee782d7b05e51253bea18370b97937b8a5b1f8448e1734bd601fc45c7f9c830f011b28e3c45e923c9c

    • SSDEEP

      768:iznYqKUQcDwsREqcUI1OlMr3dGarLIA7J1v/Q7VyNctwZAy+ur9kZhB8dGaDCqY8:irYqKUQACT/clMr3dGarLIA7J1v/Q7Vo

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks