Overview

overview

10

Static

static

7

JaffaCakes...76.exe

windows7-x64

10

JaffaCakes...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_03c03727ff292aafd48d6abcbebc8d76

  • Size

    1.2MB

  • Sample

    250121-l1py7syldq

  • MD5

    03c03727ff292aafd48d6abcbebc8d76

  • SHA1

    cb9f5c55a44a49138a998c2884e8828746386597

  • SHA256

    a54d77207216846a752b63e2c573f2de5fef47656225efc4decd158455f61582

  • SHA512

    1742fc065f139a47c03ff32df3b6b2bb14d9e18eff3529d366d420fd0c4557dfae1b334942745db6b873335e49d745bb6606d0c938e8350f9bf6c8963671a92f

  • SSDEEP

    24576:G99jZm9amAuGmG/N2jVoyy5kiubya6PjauAUeM3Nw5W+7ma+I:G99j8amAuG9V2RoX5/XaEhB3qgO

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_03c03727ff292aafd48d6abcbebc8d76

    • Size

      1.2MB

    • MD5

      03c03727ff292aafd48d6abcbebc8d76

    • SHA1

      cb9f5c55a44a49138a998c2884e8828746386597

    • SHA256

      a54d77207216846a752b63e2c573f2de5fef47656225efc4decd158455f61582

    • SHA512

      1742fc065f139a47c03ff32df3b6b2bb14d9e18eff3529d366d420fd0c4557dfae1b334942745db6b873335e49d745bb6606d0c938e8350f9bf6c8963671a92f

    • SSDEEP

      24576:G99jZm9amAuGmG/N2jVoyy5kiubya6PjauAUeM3Nw5W+7ma+I:G99j8amAuG9V2RoX5/XaEhB3qgO

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks