Overview

overview

10

Static

static

3

cf87449739...18.exe

windows7-x64

10

cf87449739...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf87449739d920d5c543b686923657a5_JaffaCakes118

  • Size

    361KB

  • Sample

    240906-pl66qawckk

  • MD5

    cf87449739d920d5c543b686923657a5

  • SHA1

    c7e7a0d6154dd1f1cbecabd9a89a51651700813b

  • SHA256

    2eda0f451b72b60b6a2067887823705f0d82e9922a917ba0fc68bbaeb82000f4

  • SHA512

    753f2bdf967c33ff886db60e9f36b8c2dbf683b0f146259b7425f062365af103432a080723ce8f8623bff74718c0c748e0798ee6de5b887bc447b2d83de99c5f

  • SSDEEP

    6144:dKsFbaCSJSlQ68HmEyMtE/mG4yQHXKgk6oOlNuX80IhItoRiX/8t+1OaRj6Z03RD:dLFba/+EivO7BlhlTo/p1OaR2Z0

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      cf87449739d920d5c543b686923657a5_JaffaCakes118

    • Size

      361KB

    • MD5

      cf87449739d920d5c543b686923657a5

    • SHA1

      c7e7a0d6154dd1f1cbecabd9a89a51651700813b

    • SHA256

      2eda0f451b72b60b6a2067887823705f0d82e9922a917ba0fc68bbaeb82000f4

    • SHA512

      753f2bdf967c33ff886db60e9f36b8c2dbf683b0f146259b7425f062365af103432a080723ce8f8623bff74718c0c748e0798ee6de5b887bc447b2d83de99c5f

    • SSDEEP

      6144:dKsFbaCSJSlQ68HmEyMtE/mG4yQHXKgk6oOlNuX80IhItoRiX/8t+1OaRj6Z03RD:dLFba/+EivO7BlhlTo/p1OaR2Z0

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks