Overview

overview

10

Static

static

3

f09751f5af...18.exe

windows7-x64

10

f09751f5af...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f09751f5aff4b509476b97a70f872515_JaffaCakes118

  • Size

    640KB

  • Sample

    240921-zpaxsstbqr

  • MD5

    f09751f5aff4b509476b97a70f872515

  • SHA1

    a087d7de74c14b84b90ea5db68dcf7f3b081e202

  • SHA256

    a7a33c015a028e65236c76169c581cd8a51765f3aca01d3f31598fb67046caa8

  • SHA512

    3e1f4e817a2f4405c1eb75aebe7012a1843d07539fc745f5876456fb7e88af0dac993f03e4a1bd6966ec389df835879052e29665c9ad3183efe895797163b87f

  • SSDEEP

    12288:MlkFac1YRwc5VmpmI+8+J/wNbc5GuVw+mzlliF3Z4mxx4oEtlK+kt9T2MY0:mcWEy8A/+hv+2iQmXRGT0

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f09751f5aff4b509476b97a70f872515_JaffaCakes118

    • Size

      640KB

    • MD5

      f09751f5aff4b509476b97a70f872515

    • SHA1

      a087d7de74c14b84b90ea5db68dcf7f3b081e202

    • SHA256

      a7a33c015a028e65236c76169c581cd8a51765f3aca01d3f31598fb67046caa8

    • SHA512

      3e1f4e817a2f4405c1eb75aebe7012a1843d07539fc745f5876456fb7e88af0dac993f03e4a1bd6966ec389df835879052e29665c9ad3183efe895797163b87f

    • SSDEEP

      12288:MlkFac1YRwc5VmpmI+8+J/wNbc5GuVw+mzlliF3Z4mxx4oEtlK+kt9T2MY0:mcWEy8A/+hv+2iQmXRGT0

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks