Overview

overview

10

Static

static

3

JaffaCakes...a5.exe

windows7-x64

10

JaffaCakes...a5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_61fbfcb111b0f4a647b5821dc78cfca5

  • Size

    3.1MB

  • Sample

    250115-zyzyaawnhk

  • MD5

    61fbfcb111b0f4a647b5821dc78cfca5

  • SHA1

    76db6d7df093c1b26d26704fd7a613c08493c120

  • SHA256

    1d875037b95448da1a5339b12f4b5a3e727df207cb412cbfaf15191bd3bbbaac

  • SHA512

    d7ed7f252395b18ee05b05c7c4acff7ca4256eaf90edbe34757f98b9503ff93a59894835dcf31932f385c6b1a817d3e5cd4072f324e2760fe6cdc363751421e2

  • SSDEEP

    49152:stpKsxcfB8AjupDmcAa27TuU5s/4+GSw095zH0Q3su2rwAGk+8lGor5sWW:mKsxcnuD727T3eAswcNH0Q3sGAg8D1sb

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_61fbfcb111b0f4a647b5821dc78cfca5

    • Size

      3.1MB

    • MD5

      61fbfcb111b0f4a647b5821dc78cfca5

    • SHA1

      76db6d7df093c1b26d26704fd7a613c08493c120

    • SHA256

      1d875037b95448da1a5339b12f4b5a3e727df207cb412cbfaf15191bd3bbbaac

    • SHA512

      d7ed7f252395b18ee05b05c7c4acff7ca4256eaf90edbe34757f98b9503ff93a59894835dcf31932f385c6b1a817d3e5cd4072f324e2760fe6cdc363751421e2

    • SSDEEP

      49152:stpKsxcfB8AjupDmcAa27TuU5s/4+GSw095zH0Q3su2rwAGk+8lGor5sWW:mKsxcnuD727T3eAswcNH0Q3sGAg8D1sb

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks