Overview

overview

10

Static

static

3

c9b9020e06...18.exe

windows7-x64

10

c9b9020e06...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9b9020e065b5401d3cb7b24665cdbc1_JaffaCakes118

  • Size

    840KB

  • Sample

    241205-2m6ykawjez

  • MD5

    c9b9020e065b5401d3cb7b24665cdbc1

  • SHA1

    67f3a416d5b0351d5721905f00bc3576fe43c132

  • SHA256

    f6b37740834dbbd92b858e3491df921ac914f5e85693f716fc6a872eca46bfe7

  • SHA512

    69de096b0d58a7ff9d6be04c1912fdd32d87e13b0d3fcc0cac7f911794262891d2ab9f63a0901ab844a05d72fc7b8b235e9e4653f20be085102c7b63d3059280

  • SSDEEP

    24576:xmw3sGTlG/C/WZyKjoX7owiUY4pG/d4lUbo:xAGTlG/C/2yEk5MM

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      c9b9020e065b5401d3cb7b24665cdbc1_JaffaCakes118

    • Size

      840KB

    • MD5

      c9b9020e065b5401d3cb7b24665cdbc1

    • SHA1

      67f3a416d5b0351d5721905f00bc3576fe43c132

    • SHA256

      f6b37740834dbbd92b858e3491df921ac914f5e85693f716fc6a872eca46bfe7

    • SHA512

      69de096b0d58a7ff9d6be04c1912fdd32d87e13b0d3fcc0cac7f911794262891d2ab9f63a0901ab844a05d72fc7b8b235e9e4653f20be085102c7b63d3059280

    • SSDEEP

      24576:xmw3sGTlG/C/WZyKjoX7owiUY4pG/d4lUbo:xAGTlG/C/2yEk5MM

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks