Overview

overview

10

Static

static

3

06920f4258...18.exe

windows7-x64

10

06920f4258...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06920f4258b0c300796a80d4d4d1f56a_JaffaCakes118

  • Size

    134KB

  • Sample

    241001-t664nstcpd

  • MD5

    06920f4258b0c300796a80d4d4d1f56a

  • SHA1

    69ed78ddc5cfba6ce746c2bfabe6bcda88bdb384

  • SHA256

    b787766a8f22a2cc2ba645788a4fe74908e3b2dfc74e0db200d871832bf2577f

  • SHA512

    3c8f488d0bec99c6cae29fabcf97c67b0e36e46a13aaf59ab911ccc350585c9264036dfc9ecd6b4e9281a761d111bb51de345448bec95a051ef0d50ff57aa5a0

  • SSDEEP

    3072:LiBRFC2KOsWBPIcgfv3QaqERF0UKhRhay0iW4i0l8e1jzhILHYJg:LiBRFC2KOjBasERFDKF0ifik31XhIEJg

Score
10/10
modiloaderdefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target

      06920f4258b0c300796a80d4d4d1f56a_JaffaCakes118

    • Size

      134KB

    • MD5

      06920f4258b0c300796a80d4d4d1f56a

    • SHA1

      69ed78ddc5cfba6ce746c2bfabe6bcda88bdb384

    • SHA256

      b787766a8f22a2cc2ba645788a4fe74908e3b2dfc74e0db200d871832bf2577f

    • SHA512

      3c8f488d0bec99c6cae29fabcf97c67b0e36e46a13aaf59ab911ccc350585c9264036dfc9ecd6b4e9281a761d111bb51de345448bec95a051ef0d50ff57aa5a0

    • SSDEEP

      3072:LiBRFC2KOsWBPIcgfv3QaqERF0UKhRhay0iW4i0l8e1jzhILHYJg:LiBRFC2KOjBasERFDKF0ifik31XhIEJg

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks