Overview

overview

10

Static

static

10

3906394f27...18.exe

windows7-x64

10

3906394f27...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3906394f2775a94bd3ca9df30ae224ef_JaffaCakes118

  • Size

    628KB

  • Sample

    240711-n6b1msxglg

  • MD5

    3906394f2775a94bd3ca9df30ae224ef

  • SHA1

    37d922c208d078e8ebe73e20aaf7f35230b6d9e5

  • SHA256

    ddcefa993731e0d4b239ee2f6574efa36a96b076476c4d7cc1cb486b549d2869

  • SHA512

    4611c2ca0eefbfa85ece5bb8c875b8f1085d1da5751432828891b3f6ee0f312d89937bb82c98f5da9e5ba6e30a0aa83fb551bf8ba93d1e0e64080593259964dc

  • SSDEEP

    12288:06WoqofTTKgGxkrUKqD59+RUXQ/wZyGKXq/jvl8Sx55DiaWkhzgj:Eor+5xkrz1RcoU/7WfgS

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      3906394f2775a94bd3ca9df30ae224ef_JaffaCakes118

    • Size

      628KB

    • MD5

      3906394f2775a94bd3ca9df30ae224ef

    • SHA1

      37d922c208d078e8ebe73e20aaf7f35230b6d9e5

    • SHA256

      ddcefa993731e0d4b239ee2f6574efa36a96b076476c4d7cc1cb486b549d2869

    • SHA512

      4611c2ca0eefbfa85ece5bb8c875b8f1085d1da5751432828891b3f6ee0f312d89937bb82c98f5da9e5ba6e30a0aa83fb551bf8ba93d1e0e64080593259964dc

    • SSDEEP

      12288:06WoqofTTKgGxkrUKqD59+RUXQ/wZyGKXq/jvl8Sx55DiaWkhzgj:Eor+5xkrz1RcoU/7WfgS

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks