Overview

overview

10

Static

static

5

最牛的�...��.url

windows7-x64

1

最牛的�...��.url

windows10-2004-x64

1

红警全�...10.exe

windows7-x64

10

红警全�...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcd4efc07a0c4d804ce0b7daa435066f_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241203-lvqcsavrcj

  • MD5

    bcd4efc07a0c4d804ce0b7daa435066f

  • SHA1

    a289def4438dce4dbf5a5605a60ac933c1a55765

  • SHA256

    b8f2d479474902ccf46b2b12504dd90c19d9f7e2ee69bce87dacac6d25dfb97a

  • SHA512

    63f9dfc367473204d9300a8cbc1d1f6af6ebd1f2aad684a53df521eefbdb13725d3cfe154b4a378b83f7192fad873aa814a9bae2de74ae3d057cba3ce51bce43

  • SSDEEP

    24576:f/CBXKjDSZLpXPL1UyH8uJzT4k2FLrYI7vR9sq7nROstj6eqF:AX20LpXJUW8ub2prtRmsR6r

Score
10/10
modiloaderdiscoverytrojanupx

Malware Config

Targets

    • Target

      最牛的单机游戏下载网站.url

    • Size

      76B

    • MD5

      f3a3a75babaac3ba5ed8dddf5125d76d

    • SHA1

      6e3c39f915ca393a6c88b8c67f74d7f1902fdcd9

    • SHA256

      eeb0f36f0d854bd9d61dea51b517098ddfae007389935a40343c1a2a3173d6f9

    • SHA512

      6d63e964b2c3a96db47072d4f53cb91e077081b4ab0764c1c1aadb58c0ddb7b79487e31cc7d7016055c78db65717a2471d1aacebf292388b30ddbb7ced96cc9c

    Score
    1/10
    behavioral1behavioral2

    • Target

      红警全能王v2010.exe

    • Size

      1.0MB

    • MD5

      7ff0bf0155a77e93f86216aefceab475

    • SHA1

      ab65d99772cb00ca6d686120ce5e5d206ddc3975

    • SHA256

      2c6bd4d46cc9505b7d502da962ee34aa62fcad728e800fd50e8d8ad8505dcca5

    • SHA512

      92849fe1a18634f74c541b114533266fe7c328bbb33a3e31360b91d2b343dd9b3b49640eb787fa3c80deee992c726d166bd6caec8414bd8a8d563ec3e428a0e4

    • SSDEEP

      24576:soahC2h99zfs3wl76HyFf6Mhng8dNAomDAHnrf6XRbJDRM4:svsm99zfs3wl7ca6Mh3mkEbJy

    Score
    10/10
    modiloaderdiscoverytrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks