Overview

overview

10

Static

static

3

b1cd7e8284...18.exe

windows7-x64

10

b1cd7e8284...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1cd7e8284ced400801147eab283ce97_JaffaCakes118

  • Size

    155KB

  • Sample

    241129-rn9ezavjhj

  • MD5

    b1cd7e8284ced400801147eab283ce97

  • SHA1

    3a1355f53f55b07da41070687fdba311f41dd943

  • SHA256

    02b44776d4f042873d872ba89f428a1b276dfa0814939d8dfaf810177b164ebd

  • SHA512

    5b6553c05d610529c57ba6c1abeac8ce1363397096066fc90ea7d2aa6b877d3998a7246b40d38b1e888e08607c84a9de8e1e1d080b59191b2851f61961cda7bd

  • SSDEEP

    3072:6b7B8ahVBJ6VIVORnNJ0W9tl+CnMC7zB/2FImXrRvah3xBChol/:aNZhVPGIVOHqCyqX7NoImXrRvaY+/

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      b1cd7e8284ced400801147eab283ce97_JaffaCakes118

    • Size

      155KB

    • MD5

      b1cd7e8284ced400801147eab283ce97

    • SHA1

      3a1355f53f55b07da41070687fdba311f41dd943

    • SHA256

      02b44776d4f042873d872ba89f428a1b276dfa0814939d8dfaf810177b164ebd

    • SHA512

      5b6553c05d610529c57ba6c1abeac8ce1363397096066fc90ea7d2aa6b877d3998a7246b40d38b1e888e08607c84a9de8e1e1d080b59191b2851f61961cda7bd

    • SSDEEP

      3072:6b7B8ahVBJ6VIVORnNJ0W9tl+CnMC7zB/2FImXrRvah3xBChol/:aNZhVPGIVOHqCyqX7NoImXrRvaY+/

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks