Overview

overview

10

Static

static

10

a0dcfe0a59...18.exe

windows7-x64

10

a0dcfe0a59...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0dcfe0a59673158cd3850eb29260159_JaffaCakes118

  • Size

    325KB

  • Sample

    241126-kdghwazkak

  • MD5

    a0dcfe0a59673158cd3850eb29260159

  • SHA1

    47723bc29f7bef04d915f907e7a1c50cc37b7c7e

  • SHA256

    12e3bc7f8dd4b42b335c2ea6c0b4aaca6f6bea0908e692a4809884a83246776a

  • SHA512

    ffaad39a00cb598bd6146c3406ad4f3005aecfdfdbfad56daa990a5a9de6a5ca3c3980956a8ad94451776041f5c75ceff3290617f085965c4e33954bec4f2f3a

  • SSDEEP

    6144:+/hC3CA8iuNcxAk1ovUkagxzlEyfmIqNeZXCid1hnxkFCS:2haHxOk1ovLtf6NeZSid/n0CS

Score
10/10
modiloaderdefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target

      a0dcfe0a59673158cd3850eb29260159_JaffaCakes118

    • Size

      325KB

    • MD5

      a0dcfe0a59673158cd3850eb29260159

    • SHA1

      47723bc29f7bef04d915f907e7a1c50cc37b7c7e

    • SHA256

      12e3bc7f8dd4b42b335c2ea6c0b4aaca6f6bea0908e692a4809884a83246776a

    • SHA512

      ffaad39a00cb598bd6146c3406ad4f3005aecfdfdbfad56daa990a5a9de6a5ca3c3980956a8ad94451776041f5c75ceff3290617f085965c4e33954bec4f2f3a

    • SSDEEP

      6144:+/hC3CA8iuNcxAk1ovUkagxzlEyfmIqNeZXCid1hnxkFCS:2haHxOk1ovLtf6NeZSid/n0CS

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks