Overview

overview

10

Static

static

3

ac10571197...18.exe

windows7-x64

10

ac10571197...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac105711978b60ce8815e262bbbc77e9_JaffaCakes118

  • Size

    1.6MB

  • Sample

    241128-mwgbya1lcl

  • MD5

    ac105711978b60ce8815e262bbbc77e9

  • SHA1

    190e2bb7509c78956b22e2d9f8c8e5883b30a234

  • SHA256

    1ab813e1eabc56689cca8707fba2bc6299b98f56c02d9d621e49a613ec4c887c

  • SHA512

    c36f30f9fa0234fb9b67b9dc494136cbe93c99599bf8d78cd53de09b378ccffd880abfea67d8fc0a8a2b435a86376e5bd09022be7668822a95e0c5b28ac57eed

  • SSDEEP

    24576:EifSC/2lqqfQZ7uVeWi/UtUzD8gbFStU4gf2EW5A2DJr/kS4vGIk6v3HXsw:EiKRwwVmUtqD8gbFh43Dp/wPHD

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ac105711978b60ce8815e262bbbc77e9_JaffaCakes118

    • Size

      1.6MB

    • MD5

      ac105711978b60ce8815e262bbbc77e9

    • SHA1

      190e2bb7509c78956b22e2d9f8c8e5883b30a234

    • SHA256

      1ab813e1eabc56689cca8707fba2bc6299b98f56c02d9d621e49a613ec4c887c

    • SHA512

      c36f30f9fa0234fb9b67b9dc494136cbe93c99599bf8d78cd53de09b378ccffd880abfea67d8fc0a8a2b435a86376e5bd09022be7668822a95e0c5b28ac57eed

    • SSDEEP

      24576:EifSC/2lqqfQZ7uVeWi/UtUzD8gbFStU4gf2EW5A2DJr/kS4vGIk6v3HXsw:EiKRwwVmUtqD8gbFh43Dp/wPHD

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks