Overview

overview

10

Static

static

3

JaffaCakes...eb.exe

windows7-x64

10

JaffaCakes...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_04c32827e32ed5f337ca2b8a333650eb

  • Size

    717KB

  • Sample

    250121-qe95gawjaq

  • MD5

    04c32827e32ed5f337ca2b8a333650eb

  • SHA1

    18323d36d437332243510739b1de83aea4bbf376

  • SHA256

    cd404cafd47781916d9f87642a3480ae62505fd176d0793ec01dd00431e00e1e

  • SHA512

    9c600896c940d6e25677cd4c4e0f0764e990dc5ba37db0f6609fc3a98ea05e2a18c2bfae877267202448814ef0ab4b19fcf32e1a9a2be8025fe45e0975154e1b

  • SSDEEP

    12288:sc//////MH00msiGLOV4gf0PegUbPcRLI26m0P5xYSNtcLsVHPjhs:sc//////MHVKb/fwegUbczQ/YSNtcL8i

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_04c32827e32ed5f337ca2b8a333650eb

    • Size

      717KB

    • MD5

      04c32827e32ed5f337ca2b8a333650eb

    • SHA1

      18323d36d437332243510739b1de83aea4bbf376

    • SHA256

      cd404cafd47781916d9f87642a3480ae62505fd176d0793ec01dd00431e00e1e

    • SHA512

      9c600896c940d6e25677cd4c4e0f0764e990dc5ba37db0f6609fc3a98ea05e2a18c2bfae877267202448814ef0ab4b19fcf32e1a9a2be8025fe45e0975154e1b

    • SSDEEP

      12288:sc//////MH00msiGLOV4gf0PegUbPcRLI26m0P5xYSNtcLsVHPjhs:sc//////MHVKb/fwegUbczQ/YSNtcL8i

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks