Overview

overview

10

Static

static

10

85f87eb7d7...18.exe

windows7-x64

10

85f87eb7d7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85f87eb7d77596c6404f53e25fa7e24e_JaffaCakes118

  • Size

    328KB

  • Sample

    241102-r1q46axalf

  • MD5

    85f87eb7d77596c6404f53e25fa7e24e

  • SHA1

    a70dc0eb32778f5b3cd8a412c66bbb9ce082ed5a

  • SHA256

    d8a6731bcaa9520380ed44fdfdbb1053a1c861fb5ab35046c0dc1eb9093650d7

  • SHA512

    753b21ec76afe1962e004d539e4c5b1db5949ddbc084e6de3f85998eeef08a6e00f741075bcad3498145579e4f7441d904b03ebbc072b3a1ebeb7fa3cb18e52f

  • SSDEEP

    6144:X8ppr6oVwAT/Y/GABOx7SYxiO5S/FkGb7UH0DzEwD/L:sp4oVn8emYxPGPUUDl/L

Score
10/10
modiloaderadwarediscoveryevasionstealertrojan

Malware Config

Targets

    • Target

      85f87eb7d77596c6404f53e25fa7e24e_JaffaCakes118

    • Size

      328KB

    • MD5

      85f87eb7d77596c6404f53e25fa7e24e

    • SHA1

      a70dc0eb32778f5b3cd8a412c66bbb9ce082ed5a

    • SHA256

      d8a6731bcaa9520380ed44fdfdbb1053a1c861fb5ab35046c0dc1eb9093650d7

    • SHA512

      753b21ec76afe1962e004d539e4c5b1db5949ddbc084e6de3f85998eeef08a6e00f741075bcad3498145579e4f7441d904b03ebbc072b3a1ebeb7fa3cb18e52f

    • SSDEEP

      6144:X8ppr6oVwAT/Y/GABOx7SYxiO5S/FkGb7UH0DzEwD/L:sp4oVn8emYxPGPUUDl/L

    Score
    10/10
    modiloaderadwarediscoveryevasionstealertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modifies firewall policy service

      evasion

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks