Overview

overview

10

Static

static

3

037f138298...18.exe

windows7-x64

10

037f138298...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    037f138298e6cc297fa7ba93061dc1ce_JaffaCakes118

  • Size

    385KB

  • Sample

    240620-gvkp3sshma

  • MD5

    037f138298e6cc297fa7ba93061dc1ce

  • SHA1

    da8cf458111f5b0a43e431550ea6adb85e479277

  • SHA256

    3e8a982deacda0b144fecc2aaeb8e74eaaa9f07289c3ba3f80e72c7090c7fa1f

  • SHA512

    b8def5536b777b626b6f275e158a5f79c394682607c9b27be32e55b57ee0fc3e9533282c8587a5ebf0598275b8f8127dcee3dc349497249c3363bbb0f6dd7360

  • SSDEEP

    12288:qtNAW3saKnBPWNT2vgoNLqhgjYKnHpagYbL:qt98aEBBt2hOYOHptYbL

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      037f138298e6cc297fa7ba93061dc1ce_JaffaCakes118

    • Size

      385KB

    • MD5

      037f138298e6cc297fa7ba93061dc1ce

    • SHA1

      da8cf458111f5b0a43e431550ea6adb85e479277

    • SHA256

      3e8a982deacda0b144fecc2aaeb8e74eaaa9f07289c3ba3f80e72c7090c7fa1f

    • SHA512

      b8def5536b777b626b6f275e158a5f79c394682607c9b27be32e55b57ee0fc3e9533282c8587a5ebf0598275b8f8127dcee3dc349497249c3363bbb0f6dd7360

    • SSDEEP

      12288:qtNAW3saKnBPWNT2vgoNLqhgjYKnHpagYbL:qt98aEBBt2hOYOHptYbL

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks