Overview

overview

10

Static

static

10

d314831e0d...18.exe

windows7-x64

10

d314831e0d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d314831e0d52f98f915ad07585982623_JaffaCakes118

  • Size

    88KB

  • Sample

    240907-3s86jsvble

  • MD5

    d314831e0d52f98f915ad07585982623

  • SHA1

    7c4cb86281b0f94e03eed862719987565fd76f40

  • SHA256

    f7f29e51e6602dc2ec0203cbb89483272893eeaac3bde8ff2e2a7d1aced76771

  • SHA512

    432055c6cbe54f624edfbed7c1be734b9d2ef1de4a135d8de0474a81ea7e5ef393e17f37276e2d6cce778cb28f382c866cb1f6963b06b1215d797ef10130e504

  • SSDEEP

    768:RI3l51bcgBH5T9Zztj7CzrWBFWGXNtmMX5VqkR6QMcXfYP+:Rimg5Tf9u8kotmMX5VnXfYP+

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d314831e0d52f98f915ad07585982623_JaffaCakes118

    • Size

      88KB

    • MD5

      d314831e0d52f98f915ad07585982623

    • SHA1

      7c4cb86281b0f94e03eed862719987565fd76f40

    • SHA256

      f7f29e51e6602dc2ec0203cbb89483272893eeaac3bde8ff2e2a7d1aced76771

    • SHA512

      432055c6cbe54f624edfbed7c1be734b9d2ef1de4a135d8de0474a81ea7e5ef393e17f37276e2d6cce778cb28f382c866cb1f6963b06b1215d797ef10130e504

    • SSDEEP

      768:RI3l51bcgBH5T9Zztj7CzrWBFWGXNtmMX5VqkR6QMcXfYP+:Rimg5Tf9u8kotmMX5VnXfYP+

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks