Overview

overview

10

Static

static

10

cd937b96f4...18.exe

windows7-x64

10

cd937b96f4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd937b96f400ae28d59a2d5f8d684ba8_JaffaCakes118

  • Size

    73KB

  • Sample

    240831-zmgmkavcqd

  • MD5

    cd937b96f400ae28d59a2d5f8d684ba8

  • SHA1

    ed3eb80169ecad815508e1c55f3e20a6a6ef3747

  • SHA256

    ecf9de801ecd7f873af3a890600aead419d5b88612751dfc89a479d23a3d7a5e

  • SHA512

    e327c7d9169a76f0267ca73a3532eefb5f19b7f449b9a5c77c0320fa8aa4575e97ee036b0b5a949b05954fe989925a6eb91def6cde14bc4a3e45f064f933381a

  • SSDEEP

    1536:f8oGku5lOA9RouT39LiUDLK/OOh4o1XmUS+C:f8oGCA9RouT39LiuW/OOhfYv+C

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      cd937b96f400ae28d59a2d5f8d684ba8_JaffaCakes118

    • Size

      73KB

    • MD5

      cd937b96f400ae28d59a2d5f8d684ba8

    • SHA1

      ed3eb80169ecad815508e1c55f3e20a6a6ef3747

    • SHA256

      ecf9de801ecd7f873af3a890600aead419d5b88612751dfc89a479d23a3d7a5e

    • SHA512

      e327c7d9169a76f0267ca73a3532eefb5f19b7f449b9a5c77c0320fa8aa4575e97ee036b0b5a949b05954fe989925a6eb91def6cde14bc4a3e45f064f933381a

    • SSDEEP

      1536:f8oGku5lOA9RouT39LiUDLK/OOh4o1XmUS+C:f8oGCA9RouT39LiuW/OOhfYv+C

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks