Overview

overview

10

Static

static

3

179d0e252b...18.exe

windows7-x64

10

179d0e252b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    179d0e252b6e5fe67c903951033a03cf_JaffaCakes118

  • Size

    787KB

  • Sample

    240627-1e49bsvbrl

  • MD5

    179d0e252b6e5fe67c903951033a03cf

  • SHA1

    ca8b72e13f892b8b44d35d7388ade75daac8ef94

  • SHA256

    4d5f86096678cb557f647bbe79def6971b5a5728cb3f6ba7cf81dd00263f5bbc

  • SHA512

    38077831b44d532bb22fb5a8f7b2baaf099b0e80d6566517ae86905e955f101814c11362867d44eae78b0a51db65ec82225bdaced3f3bf249c9cbaa9bfca4ee3

  • SSDEEP

    12288:xQyItOCh9StyaguIZxqEFmcRhsu5lF3Z4mxxpDqVTVOCV:xQyItOCh0tHicEFRHscQmXAVTzV

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      179d0e252b6e5fe67c903951033a03cf_JaffaCakes118

    • Size

      787KB

    • MD5

      179d0e252b6e5fe67c903951033a03cf

    • SHA1

      ca8b72e13f892b8b44d35d7388ade75daac8ef94

    • SHA256

      4d5f86096678cb557f647bbe79def6971b5a5728cb3f6ba7cf81dd00263f5bbc

    • SHA512

      38077831b44d532bb22fb5a8f7b2baaf099b0e80d6566517ae86905e955f101814c11362867d44eae78b0a51db65ec82225bdaced3f3bf249c9cbaa9bfca4ee3

    • SSDEEP

      12288:xQyItOCh9StyaguIZxqEFmcRhsu5lF3Z4mxxpDqVTVOCV:xQyItOCh0tHicEFRHscQmXAVTzV

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks