Overview

overview

10

Static

static

3

e0f9839fbd...18.exe

windows7-x64

10

e0f9839fbd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0f9839fbd598b6a2c3c290057545cda_JaffaCakes118

  • Size

    721KB

  • Sample

    241211-l8a51ssnfp

  • MD5

    e0f9839fbd598b6a2c3c290057545cda

  • SHA1

    ab74a05248235683f8f61fbdee68d39fa98a9da1

  • SHA256

    6f9be6027a5fb140b83c288f832a230481398c2ac95de30e671ef3662336cfbb

  • SHA512

    4b129cb08479d13d2e6ac109720ebe1a79056b6b90b94bf0fc8e47b6319494126c830a1e6b7a6206b90f1818999bf2bdd9b3a0ef348db1b30510e74e122f6eee

  • SSDEEP

    12288:XqNRWtGWTqHO+oW3HVjIwBY0dVoEciFLE20Qs8XPPt6dEmc3G5Kbl99CTgQAWeBt:XqNRWtGWTqHO+oW3HVjbBY0voEXFLE21

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e0f9839fbd598b6a2c3c290057545cda_JaffaCakes118

    • Size

      721KB

    • MD5

      e0f9839fbd598b6a2c3c290057545cda

    • SHA1

      ab74a05248235683f8f61fbdee68d39fa98a9da1

    • SHA256

      6f9be6027a5fb140b83c288f832a230481398c2ac95de30e671ef3662336cfbb

    • SHA512

      4b129cb08479d13d2e6ac109720ebe1a79056b6b90b94bf0fc8e47b6319494126c830a1e6b7a6206b90f1818999bf2bdd9b3a0ef348db1b30510e74e122f6eee

    • SSDEEP

      12288:XqNRWtGWTqHO+oW3HVjIwBY0dVoEciFLE20Qs8XPPt6dEmc3G5Kbl99CTgQAWeBt:XqNRWtGWTqHO+oW3HVjbBY0voEXFLE21

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks