Overview

overview

10

Static

static

3

75549bb358...18.exe

windows7-x64

10

75549bb358...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75549bb3584bb848999160ae048facf3_JaffaCakes118

  • Size

    768KB

  • Sample

    240726-xskkasydmq

  • MD5

    75549bb3584bb848999160ae048facf3

  • SHA1

    282e89f24a6a209ad319834f128f2f90d5fea406

  • SHA256

    14e25e1cfdfd947bb12d3943be91ea9a0291808a43185b6ed8f9d424243deece

  • SHA512

    94b4b25d1d88bd5e35f93d03f5a2c4fc16af851529ef307a4db845ec026b3b5ddc5178776bbc7e69ba6deaafbc277da98520703e4d8624bcb0908b41a89b9ecb

  • SSDEEP

    6144:kycwCEcmMYUXbKy1tuwzogPwpznM0YDEiS1sgiuloQBek4U526lF3K40NS:+LhmHwOSoZBlM/Ait3uaQBwU92w

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      75549bb3584bb848999160ae048facf3_JaffaCakes118

    • Size

      768KB

    • MD5

      75549bb3584bb848999160ae048facf3

    • SHA1

      282e89f24a6a209ad319834f128f2f90d5fea406

    • SHA256

      14e25e1cfdfd947bb12d3943be91ea9a0291808a43185b6ed8f9d424243deece

    • SHA512

      94b4b25d1d88bd5e35f93d03f5a2c4fc16af851529ef307a4db845ec026b3b5ddc5178776bbc7e69ba6deaafbc277da98520703e4d8624bcb0908b41a89b9ecb

    • SSDEEP

      6144:kycwCEcmMYUXbKy1tuwzogPwpznM0YDEiS1sgiuloQBek4U526lF3K40NS:+LhmHwOSoZBlM/Ait3uaQBwU92w

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks