Overview

overview

10

Static

static

3

dfe9b1acfa...18.exe

windows7-x64

10

dfe9b1acfa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfe9b1acfaff5ed911e6ab7216949da2_JaffaCakes118

  • Size

    60KB

  • Sample

    240914-le929axfjh

  • MD5

    dfe9b1acfaff5ed911e6ab7216949da2

  • SHA1

    e4b90a90205998903b9503ae983000408cc30fb5

  • SHA256

    d89b07cacbb828ba1e2a4d998540af2d4338c4e967f1fc535dcb6901b84c8100

  • SHA512

    1d1c4bba506996ba68d1e86a3aea55197337c246a0eaeb2a2f1321d6432ce6a64f2fedfdf6878577c3bf9d6f2610c39540756f22873686af61539c124330fba8

  • SSDEEP

    1536:Nm7wjsVTJ+p3JrkGLawHE/E2j+EDmDZIYcfRfYrx:a+sVT45mn/bjncZIxfYl

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      dfe9b1acfaff5ed911e6ab7216949da2_JaffaCakes118

    • Size

      60KB

    • MD5

      dfe9b1acfaff5ed911e6ab7216949da2

    • SHA1

      e4b90a90205998903b9503ae983000408cc30fb5

    • SHA256

      d89b07cacbb828ba1e2a4d998540af2d4338c4e967f1fc535dcb6901b84c8100

    • SHA512

      1d1c4bba506996ba68d1e86a3aea55197337c246a0eaeb2a2f1321d6432ce6a64f2fedfdf6878577c3bf9d6f2610c39540756f22873686af61539c124330fba8

    • SSDEEP

      1536:Nm7wjsVTJ+p3JrkGLawHE/E2j+EDmDZIYcfRfYrx:a+sVT45mn/bjncZIxfYl

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks