Overview

overview

10

Static

static

3

27b17a062f...18.exe

windows7-x64

10

27b17a062f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    27b17a062f258fcd5e422e98c2791920_JaffaCakes118

  • Size

    57KB

  • Sample

    240706-h3nx5ssfqf

  • MD5

    27b17a062f258fcd5e422e98c2791920

  • SHA1

    f5537588ac160856e4ec6e17a9530c93fdcd7c01

  • SHA256

    7cfbbb7db8702779f46a4068776d00a40ca45dbbf30e816a9e02f331d75eb6c9

  • SHA512

    62cc3b9e7c5efc8ad56fa95590a9d5c17db481e49a29215c5427973a1c5cd6f32c376a65e2f07b3f36907fd4373c0d36870221bf6ed1aae403a8a3a017344e61

  • SSDEEP

    1536:NmXKngPbQ4l5MnLH1pepUS0YVoEIy5nmU3z2rmrV:NEKgPs4laBEUYVoALDrJ

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      27b17a062f258fcd5e422e98c2791920_JaffaCakes118

    • Size

      57KB

    • MD5

      27b17a062f258fcd5e422e98c2791920

    • SHA1

      f5537588ac160856e4ec6e17a9530c93fdcd7c01

    • SHA256

      7cfbbb7db8702779f46a4068776d00a40ca45dbbf30e816a9e02f331d75eb6c9

    • SHA512

      62cc3b9e7c5efc8ad56fa95590a9d5c17db481e49a29215c5427973a1c5cd6f32c376a65e2f07b3f36907fd4373c0d36870221bf6ed1aae403a8a3a017344e61

    • SSDEEP

      1536:NmXKngPbQ4l5MnLH1pepUS0YVoEIy5nmU3z2rmrV:NEKgPs4laBEUYVoALDrJ

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks