Overview

overview

10

Static

static

10

JaffaCakes...5e.exe

windows7-x64

10

JaffaCakes...5e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_044bb67ef79368248d90297e17ca515e

  • Size

    707KB

  • Sample

    250121-ntewrs1phz

  • MD5

    044bb67ef79368248d90297e17ca515e

  • SHA1

    76b621d9f387c5c34b66bf00f9e2444b70c8d93b

  • SHA256

    259ec179be1b7362f26ae44c9fae099f421f533717ab8ad21e4f6011ff065625

  • SHA512

    90bcbab424a6639f928339286ed3a37cfe9a1fb7e1ed9d7df6d3f5a40ea9a84b3399b47dc2316b4c4a0a8f7d265cf6b9d20f1f4a7864068018f0e9558c7941ab

  • SSDEEP

    12288:3Zj/S5Ys9wAKbdVLO+KwtL1kYzz5z4nJ/cwqt0DMT78:pLSD9wA+/p1fd4n+wHMTw

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_044bb67ef79368248d90297e17ca515e

    • Size

      707KB

    • MD5

      044bb67ef79368248d90297e17ca515e

    • SHA1

      76b621d9f387c5c34b66bf00f9e2444b70c8d93b

    • SHA256

      259ec179be1b7362f26ae44c9fae099f421f533717ab8ad21e4f6011ff065625

    • SHA512

      90bcbab424a6639f928339286ed3a37cfe9a1fb7e1ed9d7df6d3f5a40ea9a84b3399b47dc2316b4c4a0a8f7d265cf6b9d20f1f4a7864068018f0e9558c7941ab

    • SSDEEP

      12288:3Zj/S5Ys9wAKbdVLO+KwtL1kYzz5z4nJ/cwqt0DMT78:pLSD9wA+/p1fd4n+wHMTw

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks