Overview

overview

10

Static

static

3

JaffaCakes...25.exe

windows7-x64

10

JaffaCakes...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_17903a2c75c2e497ca6cda1338ba4c25

  • Size

    370KB

  • Sample

    250123-qgca8a1kcw

  • MD5

    17903a2c75c2e497ca6cda1338ba4c25

  • SHA1

    e1a0660a8d3b8b55a397029aa4b2e937f66a29e9

  • SHA256

    f505e0221579ed11341810a4a6760d2694e1d28bdae56c60519b52f254f29f9a

  • SHA512

    285526ba16019e42ec5d6f7497ff2cea99dc5edd9926979d24483b3e786168cd5db4657b740b4bd5c696a320055ba65b46ac75fa3d84255e646c58782070dcee

  • SSDEEP

    6144:IXPxDCR6ph7kqm3NE2Mp3JjuSQpSr5OuUElaPzaWYjwM09WH4/eoZj1J9t84Q0:aK6z4t31eZOpSpUElgxY8H9WYdd9t8o

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_17903a2c75c2e497ca6cda1338ba4c25

    • Size

      370KB

    • MD5

      17903a2c75c2e497ca6cda1338ba4c25

    • SHA1

      e1a0660a8d3b8b55a397029aa4b2e937f66a29e9

    • SHA256

      f505e0221579ed11341810a4a6760d2694e1d28bdae56c60519b52f254f29f9a

    • SHA512

      285526ba16019e42ec5d6f7497ff2cea99dc5edd9926979d24483b3e786168cd5db4657b740b4bd5c696a320055ba65b46ac75fa3d84255e646c58782070dcee

    • SSDEEP

      6144:IXPxDCR6ph7kqm3NE2Mp3JjuSQpSr5OuUElaPzaWYjwM09WH4/eoZj1J9t84Q0:aK6z4t31eZOpSpUElgxY8H9WYdd9t8o

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks