Overview

overview

10

Static

static

3

bfa9172972...18.exe

windows7-x64

10

bfa9172972...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfa91729722208302c732194c4a85330_JaffaCakes118

  • Size

    551KB

  • Sample

    241203-224rraypdz

  • MD5

    bfa91729722208302c732194c4a85330

  • SHA1

    6d25b24d1ede70bfea8da5ad450c10cdb79c342b

  • SHA256

    f442b7a4858a9747fded33fd7c244985e866b9579b7b6888807420a6c97b72d8

  • SHA512

    f066c128f6376f1521f839e035876e4f215675e003cbd59fa020d563202f3115f4e55a1f2009a3956d54326b33cd3e8951da7b8fb0580a109a809dc976a0d466

  • SSDEEP

    12288:83c+NnoTnZKEK048G36k9+OO24PcWGRIivjPcp4efodck:833noTZfKv3FsOccWGZT6

Score
10/10
modiloaderdiscoveryevasiontrojan

Malware Config

Targets

    • Target

      bfa91729722208302c732194c4a85330_JaffaCakes118

    • Size

      551KB

    • MD5

      bfa91729722208302c732194c4a85330

    • SHA1

      6d25b24d1ede70bfea8da5ad450c10cdb79c342b

    • SHA256

      f442b7a4858a9747fded33fd7c244985e866b9579b7b6888807420a6c97b72d8

    • SHA512

      f066c128f6376f1521f839e035876e4f215675e003cbd59fa020d563202f3115f4e55a1f2009a3956d54326b33cd3e8951da7b8fb0580a109a809dc976a0d466

    • SSDEEP

      12288:83c+NnoTnZKEK048G36k9+OO24PcWGRIivjPcp4efodck:833noTZfKv3FsOccWGZT6

    Score
    10/10
    modiloaderdiscoveryevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks