Overview

overview

10

Static

static

3

JaffaCakes...43.exe

windows7-x64

10

JaffaCakes...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5cff2e754fda9807c74fca18a849e643

  • Size

    693KB

  • Sample

    250115-vlv2caynhv

  • MD5

    5cff2e754fda9807c74fca18a849e643

  • SHA1

    68b72c6e95075d14d6e18921595f1302c9aa884c

  • SHA256

    a669e51e17ddde4aef6e6218bca0abb06f953e8d05a4ee1031ea5d52fb8c65fa

  • SHA512

    1ff15b67344b0ebc75a8fa3569b74ae9fc4666e3605bd9f3be00f70f2fb75b7667cf461c8ef46251f700d3fcf5c04cf57537ab19de0e861c8fbb24e01638c388

  • SSDEEP

    12288:8KlN8Co1ksS4oO6ePKBGwe5QxtDwx02YltukAWjh6iQvQPeCHwjFQTOfFhaQpSkf:8yo1ksS4BiAwe5W40pReCHPTOfF8Qpx

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_5cff2e754fda9807c74fca18a849e643

    • Size

      693KB

    • MD5

      5cff2e754fda9807c74fca18a849e643

    • SHA1

      68b72c6e95075d14d6e18921595f1302c9aa884c

    • SHA256

      a669e51e17ddde4aef6e6218bca0abb06f953e8d05a4ee1031ea5d52fb8c65fa

    • SHA512

      1ff15b67344b0ebc75a8fa3569b74ae9fc4666e3605bd9f3be00f70f2fb75b7667cf461c8ef46251f700d3fcf5c04cf57537ab19de0e861c8fbb24e01638c388

    • SSDEEP

      12288:8KlN8Co1ksS4oO6ePKBGwe5QxtDwx02YltukAWjh6iQvQPeCHwjFQTOfFhaQpSkf:8yo1ksS4BiAwe5W40pReCHPTOfF8Qpx

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks