Overview

overview

10

Static

static

5

a281604286...18.exe

windows7-x64

10

a281604286...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a281604286b6af785aa0da89e3acea4b_JaffaCakes118

  • Size

    515KB

  • Sample

    241126-r44vesvret

  • MD5

    a281604286b6af785aa0da89e3acea4b

  • SHA1

    4abc82dd30cef1dad52f962a3ddb4e8d6d8b1a27

  • SHA256

    cbfe94236f11ffefc19866dd64ed41af1fc3e76b10ade036f988d831bc70c78b

  • SHA512

    d32800993444adae185d3db70a4820be559263f97e55970970c14b76f52d960b9c6013fa6b569d2a9ff6a8aca85089f0bff53a74abfe4afbc6d37332d6d52b0f

  • SSDEEP

    12288:QeA/RuTyXRcnSDYmxsPRZapYAIGNFtCePl:nApuMcSUusPXIYENFPPl

Score
10/10
modiloaderdiscoverytrojanupx

Malware Config

Targets

    • Target

      a281604286b6af785aa0da89e3acea4b_JaffaCakes118

    • Size

      515KB

    • MD5

      a281604286b6af785aa0da89e3acea4b

    • SHA1

      4abc82dd30cef1dad52f962a3ddb4e8d6d8b1a27

    • SHA256

      cbfe94236f11ffefc19866dd64ed41af1fc3e76b10ade036f988d831bc70c78b

    • SHA512

      d32800993444adae185d3db70a4820be559263f97e55970970c14b76f52d960b9c6013fa6b569d2a9ff6a8aca85089f0bff53a74abfe4afbc6d37332d6d52b0f

    • SSDEEP

      12288:QeA/RuTyXRcnSDYmxsPRZapYAIGNFtCePl:nApuMcSUusPXIYENFPPl

    Score
    10/10
    modiloaderdiscoverytrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks