Overview

overview

10

Static

static

10

挖掘鸡7...gr.exe

windows7-x64

10

挖掘鸡7...gr.exe

windows10-2004-x64

10

河源下�...cn.url

windows7-x64

1

河源下�...cn.url

windows10-2004-x64

1

淘宝热卖.url

windows7-x64

1

淘宝热卖.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ced298d4048bed5fa8b6f975800467c1_JaffaCakes118

  • Size

    701KB

  • Sample

    241206-y1mv3avpdz

  • MD5

    ced298d4048bed5fa8b6f975800467c1

  • SHA1

    428f677cca102a5f83997bbdb5b027f37b322904

  • SHA256

    377cb577ac1e72c6d29c7717ba83c3b0f6fbe36169ac34ffc07006ede77b037b

  • SHA512

    6c79e5cf3d2596ee0f9f71b6659b900753f0da26cd46d6f6abeea2cad69db7deb33607c86c85fd57c646e206ad76e06dc6e9ee1fd8fcc725f3d22729550e5c56

  • SSDEEP

    12288:gkdR1m1tj1HRTT78od3LkRzj+K5dmTPMTpSWndNm/tta4E95eESQBibGRV:ldmJHJT9dbo7aTPMAWy/tS95/ibGRV

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      挖掘鸡7.2最新版_cngr.exe

    • Size

      1.7MB

    • MD5

      f37023c41ae712e20595650fcc5f06d2

    • SHA1

      f1d0887b2d2c3788b73ba4aefcc0d060d6bfeedd

    • SHA256

      7d5bd56ecfdac63df44fc80c9b5bc2fdf55d491d0ab20edbb3a2ad6825cce076

    • SHA512

      8b27218a41f69e743f11630eb31e5d8af472c688598f438f057a3f65aa2c2644eacd39286aecb090c2343e94ed481a1a291382402b297a7a7b52949ff6c2e643

    • SSDEEP

      24576:nZXBJxLVwqSdNLRlJMXVWxaC5wa1tqqdXE+86TZStU4gf2EW5A2DJr/kS4vGIk6O:FrxBHofJMXGnrvi+RTZh43Dp/wPHXW

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      河源下载站-cngr.cn.url

    • Size

      110B

    • MD5

      87d5540eb47b60f225cc6d5e9ec5d3b5

    • SHA1

      bb87c8cd2721eed95ed96cfed3c23a71dd636743

    • SHA256

      7503e8e9530726e8934149fb2afc1a9638d8a4727cc05c6bed1c1b1539dc43fa

    • SHA512

      ed81acc65c042f99ed20b511a755606e13619ddbd7e05125ecbcf5342ac9239329184d8b1b45d47ee4fc0ef4c62e06b2bd806b73f0f5c852173798e76d23a951

    Score
    1/10
    behavioral3behavioral4

    • Target

      淘宝热卖.url

    • Size

      380B

    • MD5

      cbe73651c7aa955d4a5a303fbe025918

    • SHA1

      0da66a5b0861279f7d9e05c67356680e21081e3a

    • SHA256

      c42e9bb76bbc2f6e436c52d1890731c105c27a95056b1e4a7e5729d8e30feab5

    • SHA512

      8ac4fa53371ecb694f55f24410db1e8bb834654135bc7e005f4ff577ab53de668cb0480cfda16769d1d09be0e5e5c1a479473a5f29df1d8bc372f988b31a811c

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks