Overview

overview

10

Static

static

3

1bd8aa9182...18.exe

windows7-x64

10

1bd8aa9182...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bd8aa91822bbf33deb57642ee994cca_JaffaCakes118

  • Size

    322KB

  • Sample

    240701-vvy5cszeke

  • MD5

    1bd8aa91822bbf33deb57642ee994cca

  • SHA1

    7077daa975365704a5d33ed0846635340af2a8df

  • SHA256

    9c5e640f0e7790f959a9350e4f926986eb3468d1b7ebdc3a2b05cc61b89d891e

  • SHA512

    ea6c29713cddfa401113621d33efeab67f7568f3593cad22b6262a2e91d0f76c413ee51511b9edba1736200b4b1329ef26cc80be65b622092f3d6a2686462a6f

  • SSDEEP

    6144:HXaZkaxUyVhPj2rAqVFWWQMHhoj5jmdHbtmVFnMFJUxJl01:HXaZk6LL8VFzHo1jCbtmHMDZ1

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      1bd8aa91822bbf33deb57642ee994cca_JaffaCakes118

    • Size

      322KB

    • MD5

      1bd8aa91822bbf33deb57642ee994cca

    • SHA1

      7077daa975365704a5d33ed0846635340af2a8df

    • SHA256

      9c5e640f0e7790f959a9350e4f926986eb3468d1b7ebdc3a2b05cc61b89d891e

    • SHA512

      ea6c29713cddfa401113621d33efeab67f7568f3593cad22b6262a2e91d0f76c413ee51511b9edba1736200b4b1329ef26cc80be65b622092f3d6a2686462a6f

    • SSDEEP

      6144:HXaZkaxUyVhPj2rAqVFWWQMHhoj5jmdHbtmVFnMFJUxJl01:HXaZk6LL8VFzHo1jCbtmHMDZ1

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks