Overview

overview

10

Static

static

3

df8c27dedd...18.exe

windows7-x64

10

df8c27dedd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df8c27dedd6f8aa2e8f773ec9846f179_JaffaCakes118

  • Size

    1.4MB

  • Sample

    241211-c1zzqssjay

  • MD5

    df8c27dedd6f8aa2e8f773ec9846f179

  • SHA1

    8664ca122b979f667d0a298d4e6dd58d450afdc1

  • SHA256

    eb1802e01e455853e8e0bcaa1e3787313992e33653cc7f73c569f176d061fba0

  • SHA512

    3c45dc99ceb7fd213f27e3079e571f6884e99d06e31bc0f5fe51f13095df61c0f07a9e6bfd5e0c9dcad4431c9d6cdcbaf1ea2216f82693451e84dae37b892010

  • SSDEEP

    24576:nuc//////iSo/fnpc9sXEy0oLLyQP4FEpuEkgq0SE5JqCLqmVix2jbbYjJRwe:nuc//////cnpKoXQFEAEkgqi5JqCLF2p

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      df8c27dedd6f8aa2e8f773ec9846f179_JaffaCakes118

    • Size

      1.4MB

    • MD5

      df8c27dedd6f8aa2e8f773ec9846f179

    • SHA1

      8664ca122b979f667d0a298d4e6dd58d450afdc1

    • SHA256

      eb1802e01e455853e8e0bcaa1e3787313992e33653cc7f73c569f176d061fba0

    • SHA512

      3c45dc99ceb7fd213f27e3079e571f6884e99d06e31bc0f5fe51f13095df61c0f07a9e6bfd5e0c9dcad4431c9d6cdcbaf1ea2216f82693451e84dae37b892010

    • SSDEEP

      24576:nuc//////iSo/fnpc9sXEy0oLLyQP4FEpuEkgq0SE5JqCLqmVix2jbbYjJRwe:nuc//////cnpKoXQFEAEkgqi5JqCLF2p

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks