Overview

overview

10

Static

static

10

d91b90239f...18.exe

windows7-x64

10

d91b90239f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d91b90239fed7584c29c3719f6385f5e_JaffaCakes118

  • Size

    710KB

  • Sample

    241209-l9haqatrc1

  • MD5

    d91b90239fed7584c29c3719f6385f5e

  • SHA1

    8f9af181623a7523b6d952b5196e183152d1484f

  • SHA256

    cbd2721e10e05f934fe19a8801609614cfce89a5e4e7b6319ad71fdc5d7aa128

  • SHA512

    418274d3b4e74d77f3715dbedd3a85cb6c7793784b305604367d601649d95f0f37eb3a7d2bd02237ccf6b46c1744f02b6e02df14e631f9f5f15f55b38fa2acab

  • SSDEEP

    12288:etS5RTQ7aT7YilhjzAF4gv6tL1wURq93t5wGAT8oK:2c22T7BRS46k1BYhLATA

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d91b90239fed7584c29c3719f6385f5e_JaffaCakes118

    • Size

      710KB

    • MD5

      d91b90239fed7584c29c3719f6385f5e

    • SHA1

      8f9af181623a7523b6d952b5196e183152d1484f

    • SHA256

      cbd2721e10e05f934fe19a8801609614cfce89a5e4e7b6319ad71fdc5d7aa128

    • SHA512

      418274d3b4e74d77f3715dbedd3a85cb6c7793784b305604367d601649d95f0f37eb3a7d2bd02237ccf6b46c1744f02b6e02df14e631f9f5f15f55b38fa2acab

    • SSDEEP

      12288:etS5RTQ7aT7YilhjzAF4gv6tL1wURq93t5wGAT8oK:2c22T7BRS46k1BYhLATA

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks