Overview

overview

10

Static

static

3

c9947e6343...18.exe

windows7-x64

10

c9947e6343...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9947e634371135abde88d2483ed1266_JaffaCakes118

  • Size

    184KB

  • Sample

    241205-11fsvstqf1

  • MD5

    c9947e634371135abde88d2483ed1266

  • SHA1

    4431f0c31fdf807d76488fafa1964c4315e0c9cb

  • SHA256

    f519d83194d6aa3f431dbb4aac6e65d2ecb83a4a726b05180de9846ff4a1f7bd

  • SHA512

    b5251b6eca98df1463a980539455e7453d79e8b8ed0ded268c459566c643f18d73f1f1d2faeb7467ee33cde01861e2dfa34f47f5622e8cac6f2235da9ad1002a

  • SSDEEP

    3072:RINDgluZuO1IoVe9GnDyQ15ptl9cYEQsRPVgbaWttTKYhI/KysKj88HmL:jluZso6Tc5l1EQkIaWttTKYhISysKAN

Score
10/10
modiloaderdefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target

      c9947e634371135abde88d2483ed1266_JaffaCakes118

    • Size

      184KB

    • MD5

      c9947e634371135abde88d2483ed1266

    • SHA1

      4431f0c31fdf807d76488fafa1964c4315e0c9cb

    • SHA256

      f519d83194d6aa3f431dbb4aac6e65d2ecb83a4a726b05180de9846ff4a1f7bd

    • SHA512

      b5251b6eca98df1463a980539455e7453d79e8b8ed0ded268c459566c643f18d73f1f1d2faeb7467ee33cde01861e2dfa34f47f5622e8cac6f2235da9ad1002a

    • SSDEEP

      3072:RINDgluZuO1IoVe9GnDyQ15ptl9cYEQsRPVgbaWttTKYhI/KysKj88HmL:jluZso6Tc5l1EQkIaWttTKYhISysKAN

    Score
    10/10
    modiloaderdefense_evasiondiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks