Overview

overview

10

Static

static

10

ac2d6737d5...18.exe

windows7-x64

10

ac2d6737d5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac2d6737d56f1587ed763627556fca39_JaffaCakes118

  • Size

    71KB

  • Sample

    241128-nnjb1asjdl

  • MD5

    ac2d6737d56f1587ed763627556fca39

  • SHA1

    6126b9bfe70e69a9a035cade56b008cd18764ff5

  • SHA256

    e0c3b39cacde3913bec9b7eacf9c0d8c5eb725e1b8a0642bd0a3a2ed125221dc

  • SHA512

    a15b1f9e54b9af13f72170c47abf019e1c0042019981574210e09c82bfe402075394977993fb0875ac0dd671f231c550ebe1b9fbcacd687c0453369ab0a65a10

  • SSDEEP

    1536:29qSmMABU5i7fG3U9HA4p2d1WF+De/y99RR9+HROFa:wqSmMAffG3iHA4pI7D6y/AROF

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      ac2d6737d56f1587ed763627556fca39_JaffaCakes118

    • Size

      71KB

    • MD5

      ac2d6737d56f1587ed763627556fca39

    • SHA1

      6126b9bfe70e69a9a035cade56b008cd18764ff5

    • SHA256

      e0c3b39cacde3913bec9b7eacf9c0d8c5eb725e1b8a0642bd0a3a2ed125221dc

    • SHA512

      a15b1f9e54b9af13f72170c47abf019e1c0042019981574210e09c82bfe402075394977993fb0875ac0dd671f231c550ebe1b9fbcacd687c0453369ab0a65a10

    • SSDEEP

      1536:29qSmMABU5i7fG3U9HA4p2d1WF+De/y99RR9+HROFa:wqSmMAffG3iHA4pI7D6y/AROF

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modifies WinLogon for persistence

      persistence

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks