Overview

overview

10

Static

static

3

f1b07f32f9...18.exe

windows7-x64

10

f1b07f32f9...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1b07f32f92bdb4d12a15b28fdd7dda7_JaffaCakes118

  • Size

    32KB

  • Sample

    240922-kvvrts1fna

  • MD5

    f1b07f32f92bdb4d12a15b28fdd7dda7

  • SHA1

    84882c1577bff70b4f6690cf28a280ae44a2b383

  • SHA256

    53a3ba8ef1182a1253fe31d0255937ec3d1694e0a9ade4d41cbd44fd8818f5cd

  • SHA512

    a259696e42600000031e84419ae67704441ac2f10445bf7b9ea741b71b1d0ae769a2935a721ac9aa283dc7bfbaf23060e14d27a87359fe5e8ae6550858c3142a

  • SSDEEP

    768:Szu9DaWCN+fwKixZF7kW9FvY4rEcHTp0Fj0894KY27Xvo6ijd:S0a+fwKWzAW9e4w4SF4vCpS

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f1b07f32f92bdb4d12a15b28fdd7dda7_JaffaCakes118

    • Size

      32KB

    • MD5

      f1b07f32f92bdb4d12a15b28fdd7dda7

    • SHA1

      84882c1577bff70b4f6690cf28a280ae44a2b383

    • SHA256

      53a3ba8ef1182a1253fe31d0255937ec3d1694e0a9ade4d41cbd44fd8818f5cd

    • SHA512

      a259696e42600000031e84419ae67704441ac2f10445bf7b9ea741b71b1d0ae769a2935a721ac9aa283dc7bfbaf23060e14d27a87359fe5e8ae6550858c3142a

    • SSDEEP

      768:Szu9DaWCN+fwKixZF7kW9FvY4rEcHTp0Fj0894KY27Xvo6ijd:S0a+fwKWzAW9e4w4SF4vCpS

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks