Overview

overview

10

Static

static

7

f1382d456b...18.exe

windows7-x64

10

f1382d456b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1382d456b251bf45ebcc87aa935c80b_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240922-ebt4aszhkn

  • MD5

    f1382d456b251bf45ebcc87aa935c80b

  • SHA1

    75c274b216f12b7a0f69b31d1c8a6ecfd869a45e

  • SHA256

    3642e45276fb17aa5f9bed7b96284e06c9eb99936d16c88d954868c9b031c72b

  • SHA512

    b03cda826676d6f89b1dc996c3975cc7e1516a3681c5c4e96553ca721a5a77db7202fd5dfca63358d98aff60bdcfaa49f2b1acedb65c8ed3ef4cdbfebc1b6028

  • SSDEEP

    24576:+73eGKVYYqBd9DguO3n2HjU32PsQLJDAE0:+7OH0B3gu82w5eJ

Score
10/10
modiloaderaspackv2bootkitdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      f1382d456b251bf45ebcc87aa935c80b_JaffaCakes118

    • Size

      1.0MB

    • MD5

      f1382d456b251bf45ebcc87aa935c80b

    • SHA1

      75c274b216f12b7a0f69b31d1c8a6ecfd869a45e

    • SHA256

      3642e45276fb17aa5f9bed7b96284e06c9eb99936d16c88d954868c9b031c72b

    • SHA512

      b03cda826676d6f89b1dc996c3975cc7e1516a3681c5c4e96553ca721a5a77db7202fd5dfca63358d98aff60bdcfaa49f2b1acedb65c8ed3ef4cdbfebc1b6028

    • SSDEEP

      24576:+73eGKVYYqBd9DguO3n2HjU32PsQLJDAE0:+7OH0B3gu82w5eJ

    Score
    10/10
    modiloaderbootkitdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader First Stage

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks