Overview

overview

10

Static

static

10

8b35b2ca9c...18.exe

windows7-x64

10

8b35b2ca9c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b35b2ca9cba911c371f572131565797_JaffaCakes118

  • Size

    141KB

  • Sample

    240811-vkqp8sycrq

  • MD5

    8b35b2ca9cba911c371f572131565797

  • SHA1

    2867651ace98f509fa177ccf3762dbb7aa7af291

  • SHA256

    8294536c92cc582d6ed0862ce3b98368809e615219b9fc5c85f6fc4acc55daed

  • SHA512

    2e29ed10544b2f307954c3e200125788d38353be0a80e6467c248a4c1d3ba909e090ebfe647747cc7aef04f75ca674758e3ceb7a29ad1c6158e6650fe0ed85c0

  • SSDEEP

    3072:evqDfnQoH22itg710V0CauQmxedHSoPw7zgV/REni2jEl7I:+unQ1tgp0GCwtPwfgV/REnMlc

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      8b35b2ca9cba911c371f572131565797_JaffaCakes118

    • Size

      141KB

    • MD5

      8b35b2ca9cba911c371f572131565797

    • SHA1

      2867651ace98f509fa177ccf3762dbb7aa7af291

    • SHA256

      8294536c92cc582d6ed0862ce3b98368809e615219b9fc5c85f6fc4acc55daed

    • SHA512

      2e29ed10544b2f307954c3e200125788d38353be0a80e6467c248a4c1d3ba909e090ebfe647747cc7aef04f75ca674758e3ceb7a29ad1c6158e6650fe0ed85c0

    • SSDEEP

      3072:evqDfnQoH22itg710V0CauQmxedHSoPw7zgV/REni2jEl7I:+unQ1tgp0GCwtPwfgV/REnMlc

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks