Overview

overview

10

Static

static

10

bd032967ab...18.exe

windows7-x64

10

bd032967ab...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd032967ab4457925b8c45b055cbf7b8_JaffaCakes118

  • Size

    295KB

  • Sample

    241203-mrmcdsxlan

  • MD5

    bd032967ab4457925b8c45b055cbf7b8

  • SHA1

    75f216e055ac0b9c6e6e30839e78a5e89d33cff7

  • SHA256

    3f51a0957ebaa9af7038d62fc3e44d025fb6fb558e249bfae2dfe6dd8242c290

  • SHA512

    fef45f974b6a854012d6950a1ad13a6dde6312a52cca8c4dce546430b4a4581295df88daf99b109d4dfdb9b4c7b860ce7a057da885769da11f0420f8938dbacd

  • SSDEEP

    6144:EK2wbuvyAugHshLbdZxHQ49ebf4dKVYsR1Hc9sgCmPz68TBMm3dM0:+wj8Hs1dzHb9ebf1YsMsCG8N7t

Score
10/10
modiloaderdiscoverytrojanupx

Malware Config

Targets

    • Target

      bd032967ab4457925b8c45b055cbf7b8_JaffaCakes118

    • Size

      295KB

    • MD5

      bd032967ab4457925b8c45b055cbf7b8

    • SHA1

      75f216e055ac0b9c6e6e30839e78a5e89d33cff7

    • SHA256

      3f51a0957ebaa9af7038d62fc3e44d025fb6fb558e249bfae2dfe6dd8242c290

    • SHA512

      fef45f974b6a854012d6950a1ad13a6dde6312a52cca8c4dce546430b4a4581295df88daf99b109d4dfdb9b4c7b860ce7a057da885769da11f0420f8938dbacd

    • SSDEEP

      6144:EK2wbuvyAugHshLbdZxHQ49ebf4dKVYsR1Hc9sgCmPz68TBMm3dM0:+wj8Hs1dzHb9ebf1YsMsCG8N7t

    Score
    10/10
    modiloaderdiscoverytrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks