Overview

overview

10

Static

static

10

d469b56e4f...18.exe

windows7-x64

10

d469b56e4f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d469b56e4f875826d50969505723bfe3_JaffaCakes118

  • Size

    546KB

  • Sample

    240908-p67b8azbnb

  • MD5

    d469b56e4f875826d50969505723bfe3

  • SHA1

    631db528eea667c840c6f4bcd3245294d13d7e8f

  • SHA256

    7f523c49c653b651edeb412d4295c8ad568f685d62cfc1f4dc91a836685ef385

  • SHA512

    bc2568247c3b244e7da7f415d1fb397e70afe6d3653288b4244b0efeecf213a28eda5c5eb0e4c2392ab7e962e278b1e50e68b3a459954a70b453dde35da57793

  • SSDEEP

    12288:Fh/NS6A+y1vbS+Vnjz936iOHQMkcB8DspBHYBu:Fh/JA11vbS+VjZdWQMklQpBHYQ

Score
10/10
modiloaderdefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target

      d469b56e4f875826d50969505723bfe3_JaffaCakes118

    • Size

      546KB

    • MD5

      d469b56e4f875826d50969505723bfe3

    • SHA1

      631db528eea667c840c6f4bcd3245294d13d7e8f

    • SHA256

      7f523c49c653b651edeb412d4295c8ad568f685d62cfc1f4dc91a836685ef385

    • SHA512

      bc2568247c3b244e7da7f415d1fb397e70afe6d3653288b4244b0efeecf213a28eda5c5eb0e4c2392ab7e962e278b1e50e68b3a459954a70b453dde35da57793

    • SSDEEP

      12288:Fh/NS6A+y1vbS+Vnjz936iOHQMkcB8DspBHYBu:Fh/JA11vbS+VjZdWQMklQpBHYQ

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks