Overview

overview

10

Static

static

10

d28ee0179d...18.exe

windows7-x64

10

d28ee0179d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d28ee0179d85307a86d10c56f1a1c2a9_JaffaCakes118

  • Size

    397KB

  • Sample

    240907-wxwyfszcrd

  • MD5

    d28ee0179d85307a86d10c56f1a1c2a9

  • SHA1

    cc07ea54edb7e7ab8961be841a25317a04a70543

  • SHA256

    ddf048e4008da72400e4197e3666c1f6b83b08aae7ff4d763be5e765ef1894b8

  • SHA512

    2c08f7031d9086884c03bc89565c1b0bec303754161e045c47848789e0a27d45d4227db7c2674ba721dfa3a61a6202b2dcaf23863b8e0e859e4bd3c98f78c6c7

  • SSDEEP

    6144:cLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXoiP:I+u9nx2GjMY3XKfd/H/9PjP

Score
10/10
modiloaderdefense_evasiondiscoverypersistencetrojan

Malware Config

Targets

    • Target

      d28ee0179d85307a86d10c56f1a1c2a9_JaffaCakes118

    • Size

      397KB

    • MD5

      d28ee0179d85307a86d10c56f1a1c2a9

    • SHA1

      cc07ea54edb7e7ab8961be841a25317a04a70543

    • SHA256

      ddf048e4008da72400e4197e3666c1f6b83b08aae7ff4d763be5e765ef1894b8

    • SHA512

      2c08f7031d9086884c03bc89565c1b0bec303754161e045c47848789e0a27d45d4227db7c2674ba721dfa3a61a6202b2dcaf23863b8e0e859e4bd3c98f78c6c7

    • SSDEEP

      6144:cLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXoiP:I+u9nx2GjMY3XKfd/H/9PjP

    Score
    10/10
    modiloaderdefense_evasiondiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Impair Defenses: Safe Mode Boot

      defense_evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks