Overview

overview

10

Static

static

3

433c7e800c...18.exe

windows7-x64

10

433c7e800c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    433c7e800cda0ad621d46b303a495ebd_JaffaCakes118

  • Size

    3.9MB

  • Sample

    241014-vh8g9swarg

  • MD5

    433c7e800cda0ad621d46b303a495ebd

  • SHA1

    ecb80439ef3d0e4c6979fac761b0ae2167f3915e

  • SHA256

    11d6fd2467beb095f0b06a992985c996cf376eafc58dd4f7bde41c5a3c90d7cb

  • SHA512

    23c922341ac49c87fd41597a22b9358b895d151ae7cb4f177902ae1b31b30a8188e3a39aa88a4bb60280d14bfb8e65a03e6d93a351c2010094488105d2f9f5fa

  • SSDEEP

    98304:ayI0LgCbIb1HuBHKQxKOee/afzpaPPY7tI4Xp5Sg8I8o5MT+NIrXSCK5nuI:ay2CbM1HwqQkOenfzcnkzXpkTI8CMTYD

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      433c7e800cda0ad621d46b303a495ebd_JaffaCakes118

    • Size

      3.9MB

    • MD5

      433c7e800cda0ad621d46b303a495ebd

    • SHA1

      ecb80439ef3d0e4c6979fac761b0ae2167f3915e

    • SHA256

      11d6fd2467beb095f0b06a992985c996cf376eafc58dd4f7bde41c5a3c90d7cb

    • SHA512

      23c922341ac49c87fd41597a22b9358b895d151ae7cb4f177902ae1b31b30a8188e3a39aa88a4bb60280d14bfb8e65a03e6d93a351c2010094488105d2f9f5fa

    • SSDEEP

      98304:ayI0LgCbIb1HuBHKQxKOee/afzpaPPY7tI4Xp5Sg8I8o5MT+NIrXSCK5nuI:ay2CbM1HwqQkOenfzcnkzXpkTI8CMTYD

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks