Overview

overview

10

Static

static

10

943b49cf73...18.exe

windows7-x64

10

943b49cf73...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    943b49cf7329c4ea93379adee7b32eef_JaffaCakes118

  • Size

    828KB

  • Sample

    241124-m3zrvssndn

  • MD5

    943b49cf7329c4ea93379adee7b32eef

  • SHA1

    837da6b02809c559b8d120d92b8271afe176ac63

  • SHA256

    395f5ee80eda7b4148db8245bc9c0a123c96de90f91e8a4a970be8d55fb83121

  • SHA512

    1a6633c7e749d4e85e39313569faa565d27ecb737d8ccbac63eb2e9f17020475ca12d1caa02794d4f8b0c2fb270e83c214ddef7c4f9102f456ec0613cd618512

  • SSDEEP

    12288:Q7o6l8Y5f6aRKo1MY+D7BPvy6/m73IC5k4ziubk:Q7oHyKo1h+pSP73I+k4ziubk

Score
10/10
modiloaderbootkitdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      943b49cf7329c4ea93379adee7b32eef_JaffaCakes118

    • Size

      828KB

    • MD5

      943b49cf7329c4ea93379adee7b32eef

    • SHA1

      837da6b02809c559b8d120d92b8271afe176ac63

    • SHA256

      395f5ee80eda7b4148db8245bc9c0a123c96de90f91e8a4a970be8d55fb83121

    • SHA512

      1a6633c7e749d4e85e39313569faa565d27ecb737d8ccbac63eb2e9f17020475ca12d1caa02794d4f8b0c2fb270e83c214ddef7c4f9102f456ec0613cd618512

    • SSDEEP

      12288:Q7o6l8Y5f6aRKo1MY+D7BPvy6/m73IC5k4ziubk:Q7oHyKo1h+pSP73I+k4ziubk

    Score
    10/10
    modiloaderbootkitdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks