Overview

overview

10

Static

static

3

7947DAB534...62.exe

windows7-x64

10

7947DAB534...62.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95b4428b23e63d921fb5d27688c61cdc_JaffaCakes118

  • Size

    395KB

  • Sample

    241124-tc5czstjbl

  • MD5

    95b4428b23e63d921fb5d27688c61cdc

  • SHA1

    fd0b788794d1909b26adf874cafb21ba09941612

  • SHA256

    c60517980f0d1cc66b3364b2ec26fc50d98148d4b412bcecae7cdd71cbe61b06

  • SHA512

    8586b32c95e6630d5b2c41c71eba8b8996cc5fd32f7e978e4834dec60f3d7f09fc6c49d1af9325eaac7d7c4e0fc4a069a2e1b389e7ab174be504831133521cf8

  • SSDEEP

    12288:Ou9xnKx3V6B56vUkPhUhZLBuVyzyBQoKjuq7jZSk:O8nKxlYahUhZtujBsjuaSk

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      7947DAB5343F0215E070A8106D424E62.EXE

    • Size

      413KB

    • MD5

      7947dab5343f0215e070a8106d424e62

    • SHA1

      b4d97178090d8c3a9984f9579391a1e4ea4fc4fd

    • SHA256

      31cd05708092d2e22311abbaf9f62c2ca8dec6457bbf655eadaf2649e5cfe9ec

    • SHA512

      f374562bd71cde27f0b6fff03e9bdb643f2dcbbd2ae07c1b7dc3a8a09791056481030d930f8596c8e0f8e6dd47d772085f600237db5fa8db58c13e74b02c37f2

    • SSDEEP

      6144:dboxBEcJrUxOOH5SgIgI2BkNC0I7oluh0kf9IkjOWXMJhpCdnXSRohtA/4Td4aUb:dMx+xCD4kNC0Xuh0emO+pLRohtuuPM

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks