Overview

overview

10

Static

static

10

b2c8c57969...18.exe

windows7-x64

10

b2c8c57969...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2c8c57969349bf783c3311759acddc0_JaffaCakes118

  • Size

    839KB

  • Sample

    241129-v2xj4ssnak

  • MD5

    b2c8c57969349bf783c3311759acddc0

  • SHA1

    51b50e8a83b70b9a4989eae94ae834eeb7ad4cc8

  • SHA256

    dbb16a32edfb9ff229de00cb8c4e846303f65862081d9105d9d48355cc4e2320

  • SHA512

    80c5f459f73d2ef0601ec25099916c94803336cc388ba37a8da44bb9a3284662217ef767dbbb0c6b823c389f44b64d96c432947a4140811a26f66cf0b1c7d4b5

  • SSDEEP

    24576:hKA11vbS+VjZd2QMklqpBXYQGQmXMn2ce4:hX/S+vdsm/R4

Score
10/10
modiloaderdefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target

      b2c8c57969349bf783c3311759acddc0_JaffaCakes118

    • Size

      839KB

    • MD5

      b2c8c57969349bf783c3311759acddc0

    • SHA1

      51b50e8a83b70b9a4989eae94ae834eeb7ad4cc8

    • SHA256

      dbb16a32edfb9ff229de00cb8c4e846303f65862081d9105d9d48355cc4e2320

    • SHA512

      80c5f459f73d2ef0601ec25099916c94803336cc388ba37a8da44bb9a3284662217ef767dbbb0c6b823c389f44b64d96c432947a4140811a26f66cf0b1c7d4b5

    • SSDEEP

      24576:hKA11vbS+VjZd2QMklqpBXYQGQmXMn2ce4:hX/S+vdsm/R4

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks