Overview

overview

10

Static

static

3

JaffaCakes...fb.exe

windows7-x64

10

JaffaCakes...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0426dc14fc39479da021f104fb46cafb

  • Size

    536KB

  • Sample

    250121-nbczfs1mbj

  • MD5

    0426dc14fc39479da021f104fb46cafb

  • SHA1

    c7ee474a9a66a58edb1b7c62e2e3f8f668c62392

  • SHA256

    d978aafba08f46df3685ef8df61d404817192c0ae52db51929a9287923bf6267

  • SHA512

    be8d2d0fb9a1d2e9c0d9685acd894178cfd4c283c1f22da50c6c088724937d32da33b51bfce182509dfe9b81c3b1758e26ef6bd7498ddda90ff2a4c64b99516f

  • SSDEEP

    12288:9APqbBJWMj2W7xfjmF3Z4mxxXsXOpxXcZQ5YRiN:uSnj2qxbmQmXXZxXgQnN

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_0426dc14fc39479da021f104fb46cafb

    • Size

      536KB

    • MD5

      0426dc14fc39479da021f104fb46cafb

    • SHA1

      c7ee474a9a66a58edb1b7c62e2e3f8f668c62392

    • SHA256

      d978aafba08f46df3685ef8df61d404817192c0ae52db51929a9287923bf6267

    • SHA512

      be8d2d0fb9a1d2e9c0d9685acd894178cfd4c283c1f22da50c6c088724937d32da33b51bfce182509dfe9b81c3b1758e26ef6bd7498ddda90ff2a4c64b99516f

    • SSDEEP

      12288:9APqbBJWMj2W7xfjmF3Z4mxxXsXOpxXcZQ5YRiN:uSnj2qxbmQmXXZxXgQnN

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks