Overview

overview

10

Static

static

10

e74502b78d...18.dll

windows7-x64

10

e74502b78d...18.dll

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e74502b78d71bc26e4150dc4a69ba1a9_JaffaCakes118

  • Size

    364KB

  • Sample

    240917-vbt2astcqh

  • MD5

    e74502b78d71bc26e4150dc4a69ba1a9

  • SHA1

    4dc12863415c4bef48283d3e43976420b247518b

  • SHA256

    b93de88032e340f3ac8ae14de55d7566a932bcb7ad9e28f87693fe80fb8a802c

  • SHA512

    ce87f36a0d9bc4a88023f19daebf3bce12b5b18dd06bb279ce707109e3dca80457097e9c482f369c358ac842fa5aab6e9158c59cf958fc3354e54e6f1f0fe755

  • SSDEEP

    6144:Aalcse1WQrogEhJWHKiUvvUkek36jVsVGPtozTBxEJ5:PJlQrUWHKDvZ6jOgozTy

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      e74502b78d71bc26e4150dc4a69ba1a9_JaffaCakes118

    • Size

      364KB

    • MD5

      e74502b78d71bc26e4150dc4a69ba1a9

    • SHA1

      4dc12863415c4bef48283d3e43976420b247518b

    • SHA256

      b93de88032e340f3ac8ae14de55d7566a932bcb7ad9e28f87693fe80fb8a802c

    • SHA512

      ce87f36a0d9bc4a88023f19daebf3bce12b5b18dd06bb279ce707109e3dca80457097e9c482f369c358ac842fa5aab6e9158c59cf958fc3354e54e6f1f0fe755

    • SSDEEP

      6144:Aalcse1WQrogEhJWHKiUvvUkek36jVsVGPtozTBxEJ5:PJlQrUWHKDvZ6jOgozTy

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks