Overview

overview

10

Static

static

10

d9343b5cd3...18.exe

windows7-x64

10

d9343b5cd3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9343b5cd32314bf69bf47a497387456_JaffaCakes118

  • Size

    187KB

  • Sample

    240910-3gspeszglr

  • MD5

    d9343b5cd32314bf69bf47a497387456

  • SHA1

    e5d5a4b9e10fc6a5a9733bca729541a1f5ca638d

  • SHA256

    74cbc66eeedecc90891958dc1fec348e0d9377c187a2873540c6a050b696de65

  • SHA512

    96f8376640234060c5b58039f5f9ea1dd251697c6b10e70410d67d9fa2263b4c834d41431b6b0feaa3a88e64cbf4aace586839b502b604b01fccfc20cb6d1888

  • SSDEEP

    768:iSy4qklsz4uLWdnlpg1BptShQ1PbADwqisuBZX:q4qklsod/uDP0DwfdZX

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      d9343b5cd32314bf69bf47a497387456_JaffaCakes118

    • Size

      187KB

    • MD5

      d9343b5cd32314bf69bf47a497387456

    • SHA1

      e5d5a4b9e10fc6a5a9733bca729541a1f5ca638d

    • SHA256

      74cbc66eeedecc90891958dc1fec348e0d9377c187a2873540c6a050b696de65

    • SHA512

      96f8376640234060c5b58039f5f9ea1dd251697c6b10e70410d67d9fa2263b4c834d41431b6b0feaa3a88e64cbf4aace586839b502b604b01fccfc20cb6d1888

    • SSDEEP

      768:iSy4qklsz4uLWdnlpg1BptShQ1PbADwqisuBZX:q4qklsod/uDP0DwfdZX

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks