Overview

overview

10

Static

static

10

JaffaCakes...45.exe

windows7-x64

10

JaffaCakes...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_638103a9e0df16b472635ee8de8ef945

  • Size

    349KB

  • Sample

    250102-h7v71szrb1

  • MD5

    638103a9e0df16b472635ee8de8ef945

  • SHA1

    418c9c86434ce0082308030187d89b5ac29e672c

  • SHA256

    b864428cd9571ddfe0f19df545566c215fe8807ce30f6ca0ff0505b63e79daa2

  • SHA512

    0100b5f634de52b6ccf356610984e65fbbc786727063efda12e8c55c184e066f4e763812fcb10a9ddce666aeec16d288ea7fd340b75a7399b61fab841c4d8ed8

  • SSDEEP

    6144:OAMj7UGSaJxF+hzzyymJopApGSb9SMwm2tVV1d2QSJbAr:PMXmaJfemJopKNAVXd2QSJM

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_638103a9e0df16b472635ee8de8ef945

    • Size

      349KB

    • MD5

      638103a9e0df16b472635ee8de8ef945

    • SHA1

      418c9c86434ce0082308030187d89b5ac29e672c

    • SHA256

      b864428cd9571ddfe0f19df545566c215fe8807ce30f6ca0ff0505b63e79daa2

    • SHA512

      0100b5f634de52b6ccf356610984e65fbbc786727063efda12e8c55c184e066f4e763812fcb10a9ddce666aeec16d288ea7fd340b75a7399b61fab841c4d8ed8

    • SSDEEP

      6144:OAMj7UGSaJxF+hzzyymJopApGSb9SMwm2tVV1d2QSJbAr:PMXmaJfemJopKNAVXd2QSJM

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks