Overview

overview

10

Static

static

3

01d44ce9d8...18.exe

windows7-x64

10

01d44ce9d8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01d44ce9d8670fce45c53a82a534601b_JaffaCakes118

  • Size

    119KB

  • Sample

    240930-rwvxjszgkq

  • MD5

    01d44ce9d8670fce45c53a82a534601b

  • SHA1

    42d038678296a100db5a5f31fa185c9bf21f8a5f

  • SHA256

    ec9d8ed1b949614b2921e7ed39b102295b42b31e9831ed05557c059b94539c48

  • SHA512

    4e8f551291b7a18045e2c6755049bc778d30dcca21d17a15e7cc7a421e82f0480aff48237dd9a3f27cfab245dd5ee9f67f244d315c207961cd97ad336949cd8a

  • SSDEEP

    3072:tnj9jtfU+INndIc0Jw5iE25/XhIhBA+OXkN0n:tjbeiS25/RKKVk2

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      01d44ce9d8670fce45c53a82a534601b_JaffaCakes118

    • Size

      119KB

    • MD5

      01d44ce9d8670fce45c53a82a534601b

    • SHA1

      42d038678296a100db5a5f31fa185c9bf21f8a5f

    • SHA256

      ec9d8ed1b949614b2921e7ed39b102295b42b31e9831ed05557c059b94539c48

    • SHA512

      4e8f551291b7a18045e2c6755049bc778d30dcca21d17a15e7cc7a421e82f0480aff48237dd9a3f27cfab245dd5ee9f67f244d315c207961cd97ad336949cd8a

    • SSDEEP

      3072:tnj9jtfU+INndIc0Jw5iE25/XhIhBA+OXkN0n:tjbeiS25/RKKVk2

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks