Overview

overview

10

Static

static

10

JaffaCakes...ed.exe

windows7-x64

10

JaffaCakes...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0c335b8c9acea2be09c82828b69d63ed

  • Size

    38KB

  • Sample

    250122-k14a6aymbw

  • MD5

    0c335b8c9acea2be09c82828b69d63ed

  • SHA1

    f0c73946fa2e73152f7144182fe03dba04f338f9

  • SHA256

    caaf1100aed53a00b796d1c55f2c03c7c0d8157966d5d3efeff2acdc9256bae4

  • SHA512

    87b05b24879208a630f00af45220d575fa1e63f33c95c474ff48b04ba46ce8849b28fc5ac4a79d93e522ddb638aafd7b443444fd58d5a81411b2bce1cea99561

  • SSDEEP

    384:zhAydlyiPgPSwxa8wKbQq9cSUIDqum2aOsDbJuf9oPej++SFArhKWH9ecOmr7ZRu:zWf08Ou5m7OsDbkoPk+tzWHUJYlmP

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_0c335b8c9acea2be09c82828b69d63ed

    • Size

      38KB

    • MD5

      0c335b8c9acea2be09c82828b69d63ed

    • SHA1

      f0c73946fa2e73152f7144182fe03dba04f338f9

    • SHA256

      caaf1100aed53a00b796d1c55f2c03c7c0d8157966d5d3efeff2acdc9256bae4

    • SHA512

      87b05b24879208a630f00af45220d575fa1e63f33c95c474ff48b04ba46ce8849b28fc5ac4a79d93e522ddb638aafd7b443444fd58d5a81411b2bce1cea99561

    • SSDEEP

      384:zhAydlyiPgPSwxa8wKbQq9cSUIDqum2aOsDbJuf9oPej++SFArhKWH9ecOmr7ZRu:zWf08Ou5m7OsDbkoPk+tzWHUJYlmP

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks