Overview

overview

10

Static

static

3

e72eea919e...18.exe

windows7-x64

10

e72eea919e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e72eea919ef66ee5559db0ef094fa9d9_JaffaCakes118

  • Size

    323KB

  • Sample

    240917-tec2hs1erg

  • MD5

    e72eea919ef66ee5559db0ef094fa9d9

  • SHA1

    302eb5797e5d1fecd96dde5f8857a3419b360a7d

  • SHA256

    c911c46ed13ac2c0df7e1e67e278128fe65d47918f9e05a5dcac654d1e13af2e

  • SHA512

    6c88a7b8a5f0dee8e2e0aaca57f7440e8e8e87aeec2545f586564789d81628a2779c1536b08f750102d7b5543068608291216649d8f0bad29a3ebd223f783f5f

  • SSDEEP

    6144:RVq5p6OTPiSS/KsKHPWE8auRg0x2hZD0xlPoVeaVZkXEuQiH:7q5LPiSDHPWE8TRg0xkl0xCViQiH

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      e72eea919ef66ee5559db0ef094fa9d9_JaffaCakes118

    • Size

      323KB

    • MD5

      e72eea919ef66ee5559db0ef094fa9d9

    • SHA1

      302eb5797e5d1fecd96dde5f8857a3419b360a7d

    • SHA256

      c911c46ed13ac2c0df7e1e67e278128fe65d47918f9e05a5dcac654d1e13af2e

    • SHA512

      6c88a7b8a5f0dee8e2e0aaca57f7440e8e8e87aeec2545f586564789d81628a2779c1536b08f750102d7b5543068608291216649d8f0bad29a3ebd223f783f5f

    • SSDEEP

      6144:RVq5p6OTPiSS/KsKHPWE8auRg0x2hZD0xlPoVeaVZkXEuQiH:7q5LPiSDHPWE8TRg0xkl0xCViQiH

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks