Overview

overview

10

Static

static

7

0e7725abb4...18.exe

windows7-x64

10

0e7725abb4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e7725abb40ae0ea55c7e752272940f4_JaffaCakes118

  • Size

    541KB

  • Sample

    240625-r45fyswdjc

  • MD5

    0e7725abb40ae0ea55c7e752272940f4

  • SHA1

    6eb5c4e722193c62ad8625566c0a7ad95789dd64

  • SHA256

    1ef22be9498f72f18f69ddffa63a9b9332211b6122ea9610a391dbbf859c7dcc

  • SHA512

    fe26cfd09b5e4070fd9629001bb2647e0b950fa50fa264b55b8a1ef6964b47b403a65aed0a716f304f2670cf573d6bb1f1b541746706657b918e7a47ca08b18d

  • SSDEEP

    12288:B75fbe7gjZ/VRgjys+m+jF3Z4mxxHDqVTVOCOyVr:B75jZdE+mgQmXWVTzOKr

Score
10/10
modiloaderaspackv2trojan

Malware Config

Targets

    • Target

      0e7725abb40ae0ea55c7e752272940f4_JaffaCakes118

    • Size

      541KB

    • MD5

      0e7725abb40ae0ea55c7e752272940f4

    • SHA1

      6eb5c4e722193c62ad8625566c0a7ad95789dd64

    • SHA256

      1ef22be9498f72f18f69ddffa63a9b9332211b6122ea9610a391dbbf859c7dcc

    • SHA512

      fe26cfd09b5e4070fd9629001bb2647e0b950fa50fa264b55b8a1ef6964b47b403a65aed0a716f304f2670cf573d6bb1f1b541746706657b918e7a47ca08b18d

    • SSDEEP

      12288:B75fbe7gjZ/VRgjys+m+jF3Z4mxxHDqVTVOCOyVr:B75jZdE+mgQmXWVTzOKr

    Score
    10/10
    modiloaderaspackv2trojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks