Overview

overview

10

Static

static

10

071c759ab9...18.exe

windows7-x64

10

071c759ab9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    071c759ab94f181d9156cc6297a4b98b_JaffaCakes118

  • Size

    397KB

  • Sample

    240429-h7gpmadd38

  • MD5

    071c759ab94f181d9156cc6297a4b98b

  • SHA1

    1e0ca036fbc310272e027416eb882b9a4cd6c162

  • SHA256

    c28fd13a597e041f4fb6bed0578496c95485ece5c26e4fed0be05fa3b7853659

  • SHA512

    2d643e29a11e07b1d47c9d79d6fcbf6ea2533efcea2b8b83369d418a4f138f2b913c5055a5b791cbd04e112c09f66d26f5cbf04d3d0c795d5b2ac7fb44088122

  • SSDEEP

    6144:BLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JWPxb:J+u9nx2GjMY3XKfd/H/9R

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      071c759ab94f181d9156cc6297a4b98b_JaffaCakes118

    • Size

      397KB

    • MD5

      071c759ab94f181d9156cc6297a4b98b

    • SHA1

      1e0ca036fbc310272e027416eb882b9a4cd6c162

    • SHA256

      c28fd13a597e041f4fb6bed0578496c95485ece5c26e4fed0be05fa3b7853659

    • SHA512

      2d643e29a11e07b1d47c9d79d6fcbf6ea2533efcea2b8b83369d418a4f138f2b913c5055a5b791cbd04e112c09f66d26f5cbf04d3d0c795d5b2ac7fb44088122

    • SSDEEP

      6144:BLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JWPxb:J+u9nx2GjMY3XKfd/H/9R

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks