Overview

overview

10

Static

static

10

PHGT-ATTAC...73.exe

windows7-x64

10

PHGT-ATTAC...73.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    850fffedec571c7879caebe7fef1a2ca_JaffaCakes118

  • Size

    608KB

  • Sample

    240810-gx3nnssgme

  • MD5

    850fffedec571c7879caebe7fef1a2ca

  • SHA1

    1284b1e93a1b45824086b995b07e5c94f6972ef2

  • SHA256

    689a8442fed5bf172d9d207314977bf77fb799659de23965bdcbf47e6ac77a12

  • SHA512

    bc210c082a899a5e5efcef6fd8fbff2106b91008d27c7dfa0e14fc1c8791adef3cf31bf683f7e9c1cac7496f94b53c5a1afb91ba7d5b5060a25a4ac644adf736

  • SSDEEP

    12288:cUz4wedp9wRYzkTzHFkmGdkj8AcVPRIL7ESh1M/DOJPI1vQ1:cUbixz+rFkm3RcVJi1hqLw6+

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Extracted

Family

modiloader

C2

https://drive.google.com/u/0/uc?id=1f1jEllZeeOcsaoEdBAgrFpzTR2x36cAL&export=download

Targets

    • Target

      PHGT-ATTACHED_LIST#1506202078473.exe

    • Size

      1.2MB

    • MD5

      b7aa69fa4ade89343880733f95f98efa

    • SHA1

      026ebd95292a57fda153f1b14ea96a8061b0e005

    • SHA256

      e65953c2d6e33c5da860ceac22ef685533e9b43bb3986e8e136eec82a5f5e547

    • SHA512

      1e7be34be843eb83421cc53ac506261142c96d58cd606bbdeecb8f7fde42a2714b98fb2c640943cddd086e78e98b1fc66acbb5662716f789cf883b8d35cafaa8

    • SSDEEP

      24576:MBlDgE7EmXWAqSvg439vGSVNe1/hqIiHmwd7:M7DlC+GSjiBiGI

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks