Overview

overview

10

Static

static

10

befe432acf...18.exe

windows7-x64

10

befe432acf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    befe432acf3914f950719feff3bc18ba_JaffaCakes118

  • Size

    692KB

  • Sample

    241203-yp72vs1ncs

  • MD5

    befe432acf3914f950719feff3bc18ba

  • SHA1

    0d58cbfbeeba52253ae268ad07b706de1dd77f2b

  • SHA256

    f0bc7486fb38b8b374628d4ef5a5b1cbc9e1c5532fbe38e97ac8e08cebee055c

  • SHA512

    bbc38874ea87c8b33c29e3cfa41de761cd377624b22232d1ac2502090c54f82ce2c0a098ae2b3a9d3017f98c0915b57b73940e82e0b2befa3b5769de2d85c70a

  • SSDEEP

    12288:5FQeLTKcdEu0u30bfMo4nFKbuX7LIA44LKO6X8uT2AK:TNqcdEpu8MoKb7LRtkX8uT2j

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      befe432acf3914f950719feff3bc18ba_JaffaCakes118

    • Size

      692KB

    • MD5

      befe432acf3914f950719feff3bc18ba

    • SHA1

      0d58cbfbeeba52253ae268ad07b706de1dd77f2b

    • SHA256

      f0bc7486fb38b8b374628d4ef5a5b1cbc9e1c5532fbe38e97ac8e08cebee055c

    • SHA512

      bbc38874ea87c8b33c29e3cfa41de761cd377624b22232d1ac2502090c54f82ce2c0a098ae2b3a9d3017f98c0915b57b73940e82e0b2befa3b5769de2d85c70a

    • SSDEEP

      12288:5FQeLTKcdEu0u30bfMo4nFKbuX7LIA44LKO6X8uT2AK:TNqcdEpu8MoKb7LRtkX8uT2j

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks