Overview

overview

10

Static

static

3

bba2d5c03f...18.exe

windows7-x64

10

bba2d5c03f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bba2d5c03f40ba32bdc856f518476191_JaffaCakes118

  • Size

    278KB

  • Sample

    241203-ena6ysvmhr

  • MD5

    bba2d5c03f40ba32bdc856f518476191

  • SHA1

    f0745259c5c1b6f1f861fd30a52e0ca051cc2618

  • SHA256

    e4da3941495b5d0f60319022592645e531bb7b881f2f13947d405be2a4eb88fc

  • SHA512

    481270216e9a7d0d383fe9559e29bbabc12b961ea2acc91a06a77203810dbfdc860c463345637ea73304764fc5f2f2515ef72c42f6b832f265e6a599f54acdd5

  • SSDEEP

    6144:4AlIwcAeOGAmSdXWnPTdnDOGIKQ8cXR3aGSziW2/g34hPOUd9E:4AIVLAmSdWnrdDWK+XRHWZ341OUM

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      bba2d5c03f40ba32bdc856f518476191_JaffaCakes118

    • Size

      278KB

    • MD5

      bba2d5c03f40ba32bdc856f518476191

    • SHA1

      f0745259c5c1b6f1f861fd30a52e0ca051cc2618

    • SHA256

      e4da3941495b5d0f60319022592645e531bb7b881f2f13947d405be2a4eb88fc

    • SHA512

      481270216e9a7d0d383fe9559e29bbabc12b961ea2acc91a06a77203810dbfdc860c463345637ea73304764fc5f2f2515ef72c42f6b832f265e6a599f54acdd5

    • SSDEEP

      6144:4AlIwcAeOGAmSdXWnPTdnDOGIKQ8cXR3aGSziW2/g34hPOUd9E:4AIVLAmSdWnrdDWK+XRHWZ341OUM

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks