Overview

overview

10

Static

static

3

a3e2c0b57f...18.exe

windows7-x64

10

a3e2c0b57f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3e2c0b57fb62debdecb734066e7e743_JaffaCakes118

  • Size

    218KB

  • Sample

    240817-ygrd5swcpj

  • MD5

    a3e2c0b57fb62debdecb734066e7e743

  • SHA1

    fe29d146bc4f69ab3d6f8060c420b1883f33c07a

  • SHA256

    df5527a90177404a0a270f93c9ef9dc4d8fad716ce24b0502eeca9a47b8ca19e

  • SHA512

    2a2314125c13a602433de2a480f94ae7b7cdc4a90d4132c4b9eddca43004ab960ccfe24dcabcc12173ed8078f98e62251bbee5a385ba0eef12323c6392049e6a

  • SSDEEP

    6144:mWq/S8mIdqoR+tvCNCL85NQOuLtfdRrRG8ugxya:+p/otvCy0QOmfH4gxya

Score
10/10
modiloaderdefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target

      a3e2c0b57fb62debdecb734066e7e743_JaffaCakes118

    • Size

      218KB

    • MD5

      a3e2c0b57fb62debdecb734066e7e743

    • SHA1

      fe29d146bc4f69ab3d6f8060c420b1883f33c07a

    • SHA256

      df5527a90177404a0a270f93c9ef9dc4d8fad716ce24b0502eeca9a47b8ca19e

    • SHA512

      2a2314125c13a602433de2a480f94ae7b7cdc4a90d4132c4b9eddca43004ab960ccfe24dcabcc12173ed8078f98e62251bbee5a385ba0eef12323c6392049e6a

    • SSDEEP

      6144:mWq/S8mIdqoR+tvCNCL85NQOuLtfdRrRG8ugxya:+p/otvCy0QOmfH4gxya

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks