Overview

overview

10

Static

static

3

f70c81a378...18.exe

windows7-x64

10

f70c81a378...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f70c81a378dc5355e4590085981bf11f_JaffaCakes118

  • Size

    380KB

  • Sample

    240925-29be6stblr

  • MD5

    f70c81a378dc5355e4590085981bf11f

  • SHA1

    daedd655703e8c695481c83c899d253479214998

  • SHA256

    7f1395015e1cae98414ddd196ff09152a8347adbd27f279dbb618bd48da7f9a7

  • SHA512

    e3e2743b174f2cffdd4801ce478b105fe5d69bb6839974df6992a14a829dac289695a2da50e55e0c04429349dd0fdb547f893abbf9ece5aaf00d0364e74164b2

  • SSDEEP

    6144:/ELMqcWOZNmWBrZ7sKhqXZLoUo9ynLhziBfRJmdw877kIxpO9v7PhkNxWL10TOv0:rWOvJBN7sKhqxIkn9WB3mdw877pO9vGB

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f70c81a378dc5355e4590085981bf11f_JaffaCakes118

    • Size

      380KB

    • MD5

      f70c81a378dc5355e4590085981bf11f

    • SHA1

      daedd655703e8c695481c83c899d253479214998

    • SHA256

      7f1395015e1cae98414ddd196ff09152a8347adbd27f279dbb618bd48da7f9a7

    • SHA512

      e3e2743b174f2cffdd4801ce478b105fe5d69bb6839974df6992a14a829dac289695a2da50e55e0c04429349dd0fdb547f893abbf9ece5aaf00d0364e74164b2

    • SSDEEP

      6144:/ELMqcWOZNmWBrZ7sKhqXZLoUo9ynLhziBfRJmdw877kIxpO9v7PhkNxWL10TOv0:rWOvJBN7sKhqxIkn9WB3mdw877pO9vGB

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks