Overview

overview

10

Static

static

10

e84df8310e...18.exe

windows7-x64

10

e84df8310e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e84df8310ef3a92cbd74fd3b0690721c_JaffaCakes118

  • Size

    735KB

  • Sample

    241212-z32yfazkfn

  • MD5

    e84df8310ef3a92cbd74fd3b0690721c

  • SHA1

    cd1e6536707eb94dc81fd13e59ed38912fef2f75

  • SHA256

    a6379a0b66eb740d080b611bcad0ee219d334229b8740aac02de49448a0b34e4

  • SHA512

    56e80c5c466f640554a8f36910227880d2c820fba997e48bb97841b87578f6c4737e7f9c4d2afdd9fcf7cfceeb67c27ab2b01e0e02e4323b87211e599061e3a2

  • SSDEEP

    12288:LmX53uzH4EDA3IVOT7kb66rQ8DOsCBDWx7u+88YFXThK:Lm5mH4HIVOT7y6n2eBmC3FXTs

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e84df8310ef3a92cbd74fd3b0690721c_JaffaCakes118

    • Size

      735KB

    • MD5

      e84df8310ef3a92cbd74fd3b0690721c

    • SHA1

      cd1e6536707eb94dc81fd13e59ed38912fef2f75

    • SHA256

      a6379a0b66eb740d080b611bcad0ee219d334229b8740aac02de49448a0b34e4

    • SHA512

      56e80c5c466f640554a8f36910227880d2c820fba997e48bb97841b87578f6c4737e7f9c4d2afdd9fcf7cfceeb67c27ab2b01e0e02e4323b87211e599061e3a2

    • SSDEEP

      12288:LmX53uzH4EDA3IVOT7kb66rQ8DOsCBDWx7u+88YFXThK:Lm5mH4HIVOT7y6n2eBmC3FXTs

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks