Overview

overview

10

Static

static

3

JaffaCakes...11.exe

windows7-x64

10

JaffaCakes...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_48ea48e3082156140da98eb1d2cc4211

  • Size

    468KB

  • Sample

    250303-yyd55sxxcv

  • MD5

    48ea48e3082156140da98eb1d2cc4211

  • SHA1

    c412d7bdfd4913a4f2a683f511d7dd25705a4167

  • SHA256

    2f9cc01ee10c3d1602e159e79b00323cc8f3f170d38a3f73bcfa8f6a8464907b

  • SHA512

    e9b30d3087b9d80aac4caf428c6d2c23e092ebc457a46e18d601da42617f978b399595381c4b21cf097a7cbc8f08ce8e1a38d87426c09c9d797c33418ef02535

  • SSDEEP

    12288:ReWnwMUioIZIOCDOAn5zNrjgwUktrNEU/k4ndC:RdnwH9IZN2OK5BHgwU8K

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_48ea48e3082156140da98eb1d2cc4211

    • Size

      468KB

    • MD5

      48ea48e3082156140da98eb1d2cc4211

    • SHA1

      c412d7bdfd4913a4f2a683f511d7dd25705a4167

    • SHA256

      2f9cc01ee10c3d1602e159e79b00323cc8f3f170d38a3f73bcfa8f6a8464907b

    • SHA512

      e9b30d3087b9d80aac4caf428c6d2c23e092ebc457a46e18d601da42617f978b399595381c4b21cf097a7cbc8f08ce8e1a38d87426c09c9d797c33418ef02535

    • SSDEEP

      12288:ReWnwMUioIZIOCDOAn5zNrjgwUktrNEU/k4ndC:RdnwH9IZN2OK5BHgwU8K

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks