Overview

overview

10

Static

static

10

c38b6531d9...18.exe

windows7-x64

10

c38b6531d9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c38b6531d904c46ccd2a2a1cf9e80543_JaffaCakes118

  • Size

    76KB

  • Sample

    241204-vn8efsxmhr

  • MD5

    c38b6531d904c46ccd2a2a1cf9e80543

  • SHA1

    a7b8c818099d694ce4f3ed0be90fbe1a6eb8e564

  • SHA256

    dabd800fc600631531e376672bd68bbc64e05fecaa9d9c051bf0e1e4816a1eae

  • SHA512

    16df39b6d2ffc353b2e8a66a8bf45ae9373660fbd4a9a2c6f95c13230a64da0ddeef616798edcf5c6354cccf8ea86a3f62de175def36660c7c1839f4d42a865a

  • SSDEEP

    1536:5K8ddtt1FFxxVToOBz0WlZnbMLJhUUKJ3zzj1w:5K8dJDJDMLJh+ZzzB

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      c38b6531d904c46ccd2a2a1cf9e80543_JaffaCakes118

    • Size

      76KB

    • MD5

      c38b6531d904c46ccd2a2a1cf9e80543

    • SHA1

      a7b8c818099d694ce4f3ed0be90fbe1a6eb8e564

    • SHA256

      dabd800fc600631531e376672bd68bbc64e05fecaa9d9c051bf0e1e4816a1eae

    • SHA512

      16df39b6d2ffc353b2e8a66a8bf45ae9373660fbd4a9a2c6f95c13230a64da0ddeef616798edcf5c6354cccf8ea86a3f62de175def36660c7c1839f4d42a865a

    • SSDEEP

      1536:5K8ddtt1FFxxVToOBz0WlZnbMLJhUUKJ3zzj1w:5K8dJDJDMLJh+ZzzB

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks