Overview

overview

10

Static

static

3

8a8971f801...18.exe

windows7-x64

10

8a8971f801...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a8971f8015a55cda30b19aa5e996e11_JaffaCakes118

  • Size

    236KB

  • Sample

    241103-kemfhsyqft

  • MD5

    8a8971f8015a55cda30b19aa5e996e11

  • SHA1

    9e7681c471c6db1255d728f4653628eac17a2ced

  • SHA256

    01c015f8b920121a7e36587fe1dd0511dbd7629da24659f3f2637b2c9aae2696

  • SHA512

    b36fa43c9cfe56d8bc399cde64e7c6ee94fe929843d7765233c43d843349876907cedc2b74393a8ca3e71d67039f4d38424d36342e3348598a526d97ca390e2d

  • SSDEEP

    6144:rW2+7Ube0xA2CZPK9p8yAFmCqYah1y/emK:/be0bCM9p8BQWahsPK

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      8a8971f8015a55cda30b19aa5e996e11_JaffaCakes118

    • Size

      236KB

    • MD5

      8a8971f8015a55cda30b19aa5e996e11

    • SHA1

      9e7681c471c6db1255d728f4653628eac17a2ced

    • SHA256

      01c015f8b920121a7e36587fe1dd0511dbd7629da24659f3f2637b2c9aae2696

    • SHA512

      b36fa43c9cfe56d8bc399cde64e7c6ee94fe929843d7765233c43d843349876907cedc2b74393a8ca3e71d67039f4d38424d36342e3348598a526d97ca390e2d

    • SSDEEP

      6144:rW2+7Ube0xA2CZPK9p8yAFmCqYah1y/emK:/be0bCM9p8BQWahsPK

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks