Overview

overview

10

Static

static

7

3bb6879d0b...18.exe

windows7-x64

10

3bb6879d0b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3bb6879d0b63fbbff30bf1fc64c6e4af_JaffaCakes118

  • Size

    646KB

  • Sample

    240712-c9w97sxhjb

  • MD5

    3bb6879d0b63fbbff30bf1fc64c6e4af

  • SHA1

    15cd2c2a50831b13afd1a5e404fcaa0416370407

  • SHA256

    d182a7eb8d96cbf2babf1a390144172f9dbbe36361b33cb335ee4055eba8e097

  • SHA512

    0e03e1fdd1967e6b4296d888e21052a82668b4f8712e9bd2c9f04d328b6f6557a50f7b056cea278410e2986f2f1cb1d7d12e5a77f5f880c67aa06b810fc7d303

  • SSDEEP

    12288:Qy8Dp6uQUL4JeC+C0+r++cZeXr2OT6BL4vEJXb/5fPQ41hGwIe6XafTT4yzlR:+zCJeOFK+TXrX+BL46bhw4tIemafvZl

Score
10/10
modiloadertrojanupx

Malware Config

Targets

    • Target

      3bb6879d0b63fbbff30bf1fc64c6e4af_JaffaCakes118

    • Size

      646KB

    • MD5

      3bb6879d0b63fbbff30bf1fc64c6e4af

    • SHA1

      15cd2c2a50831b13afd1a5e404fcaa0416370407

    • SHA256

      d182a7eb8d96cbf2babf1a390144172f9dbbe36361b33cb335ee4055eba8e097

    • SHA512

      0e03e1fdd1967e6b4296d888e21052a82668b4f8712e9bd2c9f04d328b6f6557a50f7b056cea278410e2986f2f1cb1d7d12e5a77f5f880c67aa06b810fc7d303

    • SSDEEP

      12288:Qy8Dp6uQUL4JeC+C0+r++cZeXr2OT6BL4vEJXb/5fPQ41hGwIe6XafTT4yzlR:+zCJeOFK+TXrX+BL46bhw4tIemafvZl

    Score
    10/10
    modiloadertrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader First Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks