Overview

overview

10

Static

static

3

dd5702c7d2...18.exe

windows7-x64

10

dd5702c7d2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd5702c7d262a226b0c4ac00782c9f23_JaffaCakes118

  • Size

    594KB

  • Sample

    241210-gr6hdawjcz

  • MD5

    dd5702c7d262a226b0c4ac00782c9f23

  • SHA1

    035aef2f30ae9cd2de05219417dca70e23635659

  • SHA256

    ef6846f1dc867fb89caa467be42e46fd3836d29fe995663e6c5c4ae94a87d383

  • SHA512

    8a4c5adadfde5d568c2518eceb9048ee6acdfd50d3dc8997d7b202da29c6d5b319f8a1b46ad9db4bf6525b8cf2d8a8e7af969ca6ad8b813eacd21d92abe01843

  • SSDEEP

    6144:pp0m9SYNHCso153INk+2++OXuXlTv2KEPiTsnxF2idZecnl20lHRxp3gMncduD7O:sm9zNg33ERuXlTkF3Z4mxxzDqVTVOCN

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      dd5702c7d262a226b0c4ac00782c9f23_JaffaCakes118

    • Size

      594KB

    • MD5

      dd5702c7d262a226b0c4ac00782c9f23

    • SHA1

      035aef2f30ae9cd2de05219417dca70e23635659

    • SHA256

      ef6846f1dc867fb89caa467be42e46fd3836d29fe995663e6c5c4ae94a87d383

    • SHA512

      8a4c5adadfde5d568c2518eceb9048ee6acdfd50d3dc8997d7b202da29c6d5b319f8a1b46ad9db4bf6525b8cf2d8a8e7af969ca6ad8b813eacd21d92abe01843

    • SSDEEP

      6144:pp0m9SYNHCso153INk+2++OXuXlTv2KEPiTsnxF2idZecnl20lHRxp3gMncduD7O:sm9zNg33ERuXlTkF3Z4mxxzDqVTVOCN

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks