Overview

overview

10

Static

static

10

JaffaCakes...d6.exe

windows7-x64

10

JaffaCakes...d6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_084a228d9a6eab0075513e48641471d6

  • Size

    684KB

  • Sample

    250121-295c9awqfl

  • MD5

    084a228d9a6eab0075513e48641471d6

  • SHA1

    89b2d13d0c180e8ace69b5b8b9aec6098207e35c

  • SHA256

    dc1b27c8508aaaf1ddb700faabfa559505814bc1ff68896e5497d9cc5e5a83f7

  • SHA512

    cbd37a1c850e9e49fdcc2e7ded39b9a13e46ae60c1c72ed41a9c573d2070287fdd448d7860c5157cdea53a3657a92224da7b7553a99c22707d9a77a959263ede

  • SSDEEP

    12288:fCTO6wDNihzKWLnPpnW/AlTXE0B43v++cw4Oa7JCocjmBufVBHB4uwIJVvkqEfjy:b6wSK2nPpKQGXN4SmqkqEk/s1NTSL

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_084a228d9a6eab0075513e48641471d6

    • Size

      684KB

    • MD5

      084a228d9a6eab0075513e48641471d6

    • SHA1

      89b2d13d0c180e8ace69b5b8b9aec6098207e35c

    • SHA256

      dc1b27c8508aaaf1ddb700faabfa559505814bc1ff68896e5497d9cc5e5a83f7

    • SHA512

      cbd37a1c850e9e49fdcc2e7ded39b9a13e46ae60c1c72ed41a9c573d2070287fdd448d7860c5157cdea53a3657a92224da7b7553a99c22707d9a77a959263ede

    • SSDEEP

      12288:fCTO6wDNihzKWLnPpnW/AlTXE0B43v++cw4Oa7JCocjmBufVBHB4uwIJVvkqEfjy:b6wSK2nPpKQGXN4SmqkqEk/s1NTSL

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks