Overview

overview

10

Static

static

3

010686309e...18.exe

windows7-x64

10

010686309e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    010686309efacb24f1428805bacf3ebe_JaffaCakes118

  • Size

    609KB

  • Sample

    240619-2yaz9szfmr

  • MD5

    010686309efacb24f1428805bacf3ebe

  • SHA1

    0c8277c437a9e8498aecbcae9f451cc7facb2e89

  • SHA256

    2eff9f54b85502d465ef958489de1ef90f8eca692963cf6e45a377a7e8e128c4

  • SHA512

    cacdd128fb79cb1a0806ed5c219c0ad444eb7516a04827ab515864c0161fbe8dfc2bc4fe13d7bd405c7f8f0cff931eb698603a249b863e6286c7a767d2977abd

  • SSDEEP

    12288:1gBnrGszdIVuOdxOOg3CzqHEpDljdiF3Z4mxxKoEtlK+kt9T2Mh:1Ejwg3UtlljdiQmXDGc

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      010686309efacb24f1428805bacf3ebe_JaffaCakes118

    • Size

      609KB

    • MD5

      010686309efacb24f1428805bacf3ebe

    • SHA1

      0c8277c437a9e8498aecbcae9f451cc7facb2e89

    • SHA256

      2eff9f54b85502d465ef958489de1ef90f8eca692963cf6e45a377a7e8e128c4

    • SHA512

      cacdd128fb79cb1a0806ed5c219c0ad444eb7516a04827ab515864c0161fbe8dfc2bc4fe13d7bd405c7f8f0cff931eb698603a249b863e6286c7a767d2977abd

    • SSDEEP

      12288:1gBnrGszdIVuOdxOOg3CzqHEpDljdiF3Z4mxxKoEtlK+kt9T2Mh:1Ejwg3UtlljdiQmXDGc

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks