Overview

overview

10

Static

static

10

d329f6855e...18.dll

windows7-x64

10

d329f6855e...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d329f6855eee22d331187c119918ab2d_JaffaCakes118

  • Size

    34KB

  • Sample

    240908-a14ltavapn

  • MD5

    d329f6855eee22d331187c119918ab2d

  • SHA1

    bb8a4df212d3d471670ac1a5b0c48de7630c7197

  • SHA256

    d10842d8c3ce0b16566bfc7ed6b7db3924b735c8e90faac55650705134c27e2b

  • SHA512

    31d9bf3f390cbf3aef85441f1da53703c240da044e2ca378cf2c356757329c62cdeebf205b562df6044dfcdad2fc2b997dc5c16a2488c9b9a3c44a57b34f7946

  • SSDEEP

    768:Yoi4qZOLQNwdXcBq5OpBlaKr91EPFME3ryYdR4ftI9QuV:Yv4qZyQNwdcUOpBlaO1oMsrNUuV

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      d329f6855eee22d331187c119918ab2d_JaffaCakes118

    • Size

      34KB

    • MD5

      d329f6855eee22d331187c119918ab2d

    • SHA1

      bb8a4df212d3d471670ac1a5b0c48de7630c7197

    • SHA256

      d10842d8c3ce0b16566bfc7ed6b7db3924b735c8e90faac55650705134c27e2b

    • SHA512

      31d9bf3f390cbf3aef85441f1da53703c240da044e2ca378cf2c356757329c62cdeebf205b562df6044dfcdad2fc2b997dc5c16a2488c9b9a3c44a57b34f7946

    • SSDEEP

      768:Yoi4qZOLQNwdXcBq5OpBlaKr91EPFME3ryYdR4ftI9QuV:Yv4qZyQNwdcUOpBlaO1oMsrNUuV

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks