Overview

overview

10

Static

static

10

JaffaCakes...c0.exe

windows7-x64

10

JaffaCakes...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6de0607753b650641d429f784e89fec0

  • Size

    330KB

  • Sample

    250103-trvr4asmbv

  • MD5

    6de0607753b650641d429f784e89fec0

  • SHA1

    325838551796552a416d5636d4729a0f222fa46c

  • SHA256

    ee7d5cb3295cba7fb704bd79eaa18bb3dbb69c7c9b20022b659caa9cc7a2b6cc

  • SHA512

    eb8e50034e0cf9602194c68fca79c6a8a4f45b19b9dce7bf34ec5d9b3f366e2fc44b898c6957b8cdb6a2c9b9c7a56823d438d8b90901f2ce2090124472823d6d

  • SSDEEP

    6144:XZf1WtKuJuG8qYIdgOcjZsPvwQ7XRTy9fJO4kS67mpKC4:JABdg0d7XRTyrDk0

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_6de0607753b650641d429f784e89fec0

    • Size

      330KB

    • MD5

      6de0607753b650641d429f784e89fec0

    • SHA1

      325838551796552a416d5636d4729a0f222fa46c

    • SHA256

      ee7d5cb3295cba7fb704bd79eaa18bb3dbb69c7c9b20022b659caa9cc7a2b6cc

    • SHA512

      eb8e50034e0cf9602194c68fca79c6a8a4f45b19b9dce7bf34ec5d9b3f366e2fc44b898c6957b8cdb6a2c9b9c7a56823d438d8b90901f2ce2090124472823d6d

    • SSDEEP

      6144:XZf1WtKuJuG8qYIdgOcjZsPvwQ7XRTy9fJO4kS67mpKC4:JABdg0d7XRTyrDk0

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks