Overview

overview

10

Static

static

3

fa54ac33e3...18.exe

windows7-x64

10

fa54ac33e3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa54ac33e33b9dccbf0ebfa250a5e502_JaffaCakes118

  • Size

    726KB

  • Sample

    240927-np3r2ashpc

  • MD5

    fa54ac33e33b9dccbf0ebfa250a5e502

  • SHA1

    af85a0051a3e6348b3a888f280521ec46e4ec7fc

  • SHA256

    86c07b8d6ca0325e4ec5c439b45426d0614dd810e6a651dd07eda8aab0d713c9

  • SHA512

    65ed876e3edd448a8196cdc957852379e11f05382654c1fbf4fe920f72106be92b89b58c8be1ca78c68b7a9c4268030daa7e108411d8d481d4e5ec3c08613586

  • SSDEEP

    12288:p9Cc5k0mR3P8XhGLxe0DdKK2BH3scfqs45k7XVnMJmaVKmdPOmIzDS0oUk++tEOB:V5k0mR3P8Xux7Dddi3wfWjVnM9xdP9IC

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      fa54ac33e33b9dccbf0ebfa250a5e502_JaffaCakes118

    • Size

      726KB

    • MD5

      fa54ac33e33b9dccbf0ebfa250a5e502

    • SHA1

      af85a0051a3e6348b3a888f280521ec46e4ec7fc

    • SHA256

      86c07b8d6ca0325e4ec5c439b45426d0614dd810e6a651dd07eda8aab0d713c9

    • SHA512

      65ed876e3edd448a8196cdc957852379e11f05382654c1fbf4fe920f72106be92b89b58c8be1ca78c68b7a9c4268030daa7e108411d8d481d4e5ec3c08613586

    • SSDEEP

      12288:p9Cc5k0mR3P8XhGLxe0DdKK2BH3scfqs45k7XVnMJmaVKmdPOmIzDS0oUk++tEOB:V5k0mR3P8Xux7Dddi3wfWjVnM9xdP9IC

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks