Overview

overview

10

Static

static

3

95e9dc0fb6...18.exe

windows7-x64

10

95e9dc0fb6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95e9dc0fb65539828f89c46d34972834_JaffaCakes118

  • Size

    738KB

  • Sample

    241124-t47mesylcs

  • MD5

    95e9dc0fb65539828f89c46d34972834

  • SHA1

    25088f54a342137cfae175417836b38b7e9f8f91

  • SHA256

    0e2dd03b50bf8cd88d8d777ba4e9e1fc65cdb4cd73f2c5628c00e318f8063349

  • SHA512

    2562144b0f48302cd63d1a37a3a94d9ccc170b73cab2e03fde1c292176a7b9de01a04719e861abf690ca51569e4b4d72aa2b9019123f0e110e62d26ba25cfc75

  • SSDEEP

    12288:QCc//////l1EdwQ59KT9HZVKjAxdvQviFbnez9nphvOXU1OYm2ciYFQMpwS:lc//////l1EdN9af8jKY6Fbnez9nH2ci

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      95e9dc0fb65539828f89c46d34972834_JaffaCakes118

    • Size

      738KB

    • MD5

      95e9dc0fb65539828f89c46d34972834

    • SHA1

      25088f54a342137cfae175417836b38b7e9f8f91

    • SHA256

      0e2dd03b50bf8cd88d8d777ba4e9e1fc65cdb4cd73f2c5628c00e318f8063349

    • SHA512

      2562144b0f48302cd63d1a37a3a94d9ccc170b73cab2e03fde1c292176a7b9de01a04719e861abf690ca51569e4b4d72aa2b9019123f0e110e62d26ba25cfc75

    • SSDEEP

      12288:QCc//////l1EdwQ59KT9HZVKjAxdvQviFbnez9nphvOXU1OYm2ciYFQMpwS:lc//////l1EdN9af8jKY6Fbnez9nH2ci

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks