Overview

overview

10

Static

static

10

2edeb2ff18...18.exe

windows7-x64

10

2edeb2ff18...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2edeb2ff18dbc657dfb2e8aa3fd9fbc8_JaffaCakes118

  • Size

    719KB

  • Sample

    240510-njkn9seh78

  • MD5

    2edeb2ff18dbc657dfb2e8aa3fd9fbc8

  • SHA1

    821705cee1712031bfea83c1673ec59c83fa6693

  • SHA256

    e275e10bea80834252aea1b5dba9a817b278b5c4a6d0594b01b1605de0b66f79

  • SHA512

    d8899f5f928ddb48396c8351c31a65a8627010ac466b4c47b8e8af7a2a529f26e499a50cebbf84a563e762f4b986543b343835d67ce1b802651bcceaed632733

  • SSDEEP

    12288:Z9s0WkglhZbd1S2XgKsIpCGUy7tkEccMtXVuOdeTqlTKFbso:ZnOhZbd1SbnKayxFKVu72lTKF/

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      2edeb2ff18dbc657dfb2e8aa3fd9fbc8_JaffaCakes118

    • Size

      719KB

    • MD5

      2edeb2ff18dbc657dfb2e8aa3fd9fbc8

    • SHA1

      821705cee1712031bfea83c1673ec59c83fa6693

    • SHA256

      e275e10bea80834252aea1b5dba9a817b278b5c4a6d0594b01b1605de0b66f79

    • SHA512

      d8899f5f928ddb48396c8351c31a65a8627010ac466b4c47b8e8af7a2a529f26e499a50cebbf84a563e762f4b986543b343835d67ce1b802651bcceaed632733

    • SSDEEP

      12288:Z9s0WkglhZbd1S2XgKsIpCGUy7tkEccMtXVuOdeTqlTKFbso:ZnOhZbd1SbnKayxFKVu72lTKF/

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks