Overview

overview

10

Static

static

3

a22db2a7c5...18.exe

windows7-x64

10

a22db2a7c5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a22db2a7c51acb7e859d35889c839fbf_JaffaCakes118

  • Size

    30KB

  • Sample

    241126-qm63sayrcr

  • MD5

    a22db2a7c51acb7e859d35889c839fbf

  • SHA1

    fb6b5268809371356322be2167f6524d3866693a

  • SHA256

    12d83f29b67d8dc092832f92b5e89d95e87e45f017998529f15547b9c74e544d

  • SHA512

    4efdd31d877989f123b34ad588ed470a821a8b3fe2e9ad913f9911dd905494c07ec62469bbb755b6f9723ae4eef459837c82fcf67ef65dbffba58f99318a5055

  • SSDEEP

    768:neyXqZ5halU1Qz53pWeS9tAtQFNKW2WH+H:ngalUG5EeYG2q

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      a22db2a7c51acb7e859d35889c839fbf_JaffaCakes118

    • Size

      30KB

    • MD5

      a22db2a7c51acb7e859d35889c839fbf

    • SHA1

      fb6b5268809371356322be2167f6524d3866693a

    • SHA256

      12d83f29b67d8dc092832f92b5e89d95e87e45f017998529f15547b9c74e544d

    • SHA512

      4efdd31d877989f123b34ad588ed470a821a8b3fe2e9ad913f9911dd905494c07ec62469bbb755b6f9723ae4eef459837c82fcf67ef65dbffba58f99318a5055

    • SSDEEP

      768:neyXqZ5halU1Qz53pWeS9tAtQFNKW2WH+H:ngalUG5EeYG2q

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks