Overview

overview

10

Static

static

3

02e19ab1b0...18.exe

windows7-x64

10

02e19ab1b0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02e19ab1b09310b3f98583fa8167cf7c_JaffaCakes118

  • Size

    23KB

  • Sample

    240620-fbcppatepl

  • MD5

    02e19ab1b09310b3f98583fa8167cf7c

  • SHA1

    3603c7b622eb6979142396b75f92e22373ebf448

  • SHA256

    4564a3d0650a5cc02b033f5e866a86f5e709a094ba5b617f726d0833db9e80bc

  • SHA512

    bf3cd4429c515a6559a1427272b1f5c632d80405d030279fee4e4b2ca98f16e2a83a7b699e61495af849f425689e1d9d5e5a049ebae21c3c12e1f573bdac595d

  • SSDEEP

    384:EgSRGOuu9L3KK2esfQZMlpwfJeqgOgWYpIlRVZENoKNLn3J8BtUGkXVf:ETRzRjYfQZMl+EUKoSiOXt

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      02e19ab1b09310b3f98583fa8167cf7c_JaffaCakes118

    • Size

      23KB

    • MD5

      02e19ab1b09310b3f98583fa8167cf7c

    • SHA1

      3603c7b622eb6979142396b75f92e22373ebf448

    • SHA256

      4564a3d0650a5cc02b033f5e866a86f5e709a094ba5b617f726d0833db9e80bc

    • SHA512

      bf3cd4429c515a6559a1427272b1f5c632d80405d030279fee4e4b2ca98f16e2a83a7b699e61495af849f425689e1d9d5e5a049ebae21c3c12e1f573bdac595d

    • SSDEEP

      384:EgSRGOuu9L3KK2esfQZMlpwfJeqgOgWYpIlRVZENoKNLn3J8BtUGkXVf:ETRzRjYfQZMl+EUKoSiOXt

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks