Overview

overview

10

Static

static

3

d9073f0e89...18.exe

windows7-x64

10

d9073f0e89...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9073f0e898ba6fb94efc8389f7c2467_JaffaCakes118

  • Size

    845KB

  • Sample

    241209-ltvacaylgq

  • MD5

    d9073f0e898ba6fb94efc8389f7c2467

  • SHA1

    c3d1e807060d781519e2fd9099da57b665794518

  • SHA256

    5dc9a94faa1f602dc03dbcf8447daee67c4c7a5d2e87fcdeca6a71f073dbe724

  • SHA512

    bab0bd473a15e091ac94f9614ba15b86a6d6ec1201ed740ff5e00b5d91cc7080c1416fa182771a825a4d9b1ed415a8090e208b8678536354b190fe32c841caa1

  • SSDEEP

    24576:Fc3oyO3ECZAoPu2VK/rYIfZ6bHSBwjFed:u4coP05fZ+y+jFed

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d9073f0e898ba6fb94efc8389f7c2467_JaffaCakes118

    • Size

      845KB

    • MD5

      d9073f0e898ba6fb94efc8389f7c2467

    • SHA1

      c3d1e807060d781519e2fd9099da57b665794518

    • SHA256

      5dc9a94faa1f602dc03dbcf8447daee67c4c7a5d2e87fcdeca6a71f073dbe724

    • SHA512

      bab0bd473a15e091ac94f9614ba15b86a6d6ec1201ed740ff5e00b5d91cc7080c1416fa182771a825a4d9b1ed415a8090e208b8678536354b190fe32c841caa1

    • SSDEEP

      24576:Fc3oyO3ECZAoPu2VK/rYIfZ6bHSBwjFed:u4coP05fZ+y+jFed

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks