Overview

overview

10

Static

static

10

JaffaCakes...6d.exe

windows7-x64

10

JaffaCakes...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_982c6b28f54ae21246cd475446966a6d

  • Size

    1.8MB

  • Sample

    250330-bnxheawzgt

  • MD5

    982c6b28f54ae21246cd475446966a6d

  • SHA1

    46e63fad84a643faa5ab4447f4bbf6b76fedaca1

  • SHA256

    9aa31e35ec0f1391c25e4c950b5139924add75218cc52017c32ef52eba3a8617

  • SHA512

    ae5e71f78016e4b282a2d36aede1d9771c213dee8f0485aa259a1ac2991ffd8002512349051cee0f10ee8e74a5de2d0c9e642d0640f01b9b1b6da6689b1af905

  • SSDEEP

    24576:PQqSDAh58lC2Ndn43YE1OSXRxRLVCWIYRQFihqBZKc0jLxl+D5Fw5wif2vi7kiya:YDAoooARxR2ihqNktl+FF4w+Ia

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      JaffaCakes118_982c6b28f54ae21246cd475446966a6d

    • Size

      1.8MB

    • MD5

      982c6b28f54ae21246cd475446966a6d

    • SHA1

      46e63fad84a643faa5ab4447f4bbf6b76fedaca1

    • SHA256

      9aa31e35ec0f1391c25e4c950b5139924add75218cc52017c32ef52eba3a8617

    • SHA512

      ae5e71f78016e4b282a2d36aede1d9771c213dee8f0485aa259a1ac2991ffd8002512349051cee0f10ee8e74a5de2d0c9e642d0640f01b9b1b6da6689b1af905

    • SSDEEP

      24576:PQqSDAh58lC2Ndn43YE1OSXRxRLVCWIYRQFihqBZKc0jLxl+D5Fw5wif2vi7kiya:YDAoooARxR2ihqNktl+FF4w+Ia

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks