Overview

overview

10

Static

static

3

cf467479fd...18.exe

windows7-x64

10

cf467479fd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf467479fdc99b3db98e8564e6cac482_JaffaCakes118

  • Size

    27KB

  • Sample

    240906-lxwycazfre

  • MD5

    cf467479fdc99b3db98e8564e6cac482

  • SHA1

    38059448b95dadef82accb6502c96e918ec99749

  • SHA256

    bb8962e9ff8731f21efd36f63e398cde9339820351bc00d6a9c923abadb7862b

  • SHA512

    eb3aa0ed8c16065f0b7833eb499d6c3ca96a6fb7f807b70bf0ae2d83a7f5619a296e377dc358adbb57614f234adc7afd52a820e553aff71f941e6b29691d0d7a

  • SSDEEP

    384:M8Yr2vDf3mtjmzuhNuQ0dZOKa7EAfH5+3KJIYfIpljPWfcfbfY6Lt3unzvRZG0cK:XM2RauhagGH83kreW2ZAVmc

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      cf467479fdc99b3db98e8564e6cac482_JaffaCakes118

    • Size

      27KB

    • MD5

      cf467479fdc99b3db98e8564e6cac482

    • SHA1

      38059448b95dadef82accb6502c96e918ec99749

    • SHA256

      bb8962e9ff8731f21efd36f63e398cde9339820351bc00d6a9c923abadb7862b

    • SHA512

      eb3aa0ed8c16065f0b7833eb499d6c3ca96a6fb7f807b70bf0ae2d83a7f5619a296e377dc358adbb57614f234adc7afd52a820e553aff71f941e6b29691d0d7a

    • SSDEEP

      384:M8Yr2vDf3mtjmzuhNuQ0dZOKa7EAfH5+3KJIYfIpljPWfcfbfY6Lt3unzvRZG0cK:XM2RauhagGH83kreW2ZAVmc

    Score
    10/10
    modiloaderpersistencetrojandiscovery

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks