Overview

overview

10

Static

static

10

dbc9ddb662...18.exe

windows7-x64

10

dbc9ddb662...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbc9ddb662532c71ba27c24970ed70c1_JaffaCakes118

  • Size

    163KB

  • Sample

    241209-14hfvstkat

  • MD5

    dbc9ddb662532c71ba27c24970ed70c1

  • SHA1

    ddf78fd0b35cf9bd24100832e5b68833b2a99dc7

  • SHA256

    f46789bdcd33bd5e9d3c6a1823d4f3584ac08ba2ee5b583c8c4fba5c69291f45

  • SHA512

    8e8723804d78f53f29602678f8f542020916d2c1092c76dd128f9a12604ac20a9157f02ef8c9bd70aecedc1a84d96487af9d58b5289466232ae952f3dc7117a5

  • SSDEEP

    3072:EQe57YK9IMU2YoOVxYOr9Gf3NNUqK3txS1yHr8p5RR2LYTpW:EQQ78v2Yoadr0f93KOkgTW

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      dbc9ddb662532c71ba27c24970ed70c1_JaffaCakes118

    • Size

      163KB

    • MD5

      dbc9ddb662532c71ba27c24970ed70c1

    • SHA1

      ddf78fd0b35cf9bd24100832e5b68833b2a99dc7

    • SHA256

      f46789bdcd33bd5e9d3c6a1823d4f3584ac08ba2ee5b583c8c4fba5c69291f45

    • SHA512

      8e8723804d78f53f29602678f8f542020916d2c1092c76dd128f9a12604ac20a9157f02ef8c9bd70aecedc1a84d96487af9d58b5289466232ae952f3dc7117a5

    • SSDEEP

      3072:EQe57YK9IMU2YoOVxYOr9Gf3NNUqK3txS1yHr8p5RR2LYTpW:EQQ78v2Yoadr0f93KOkgTW

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks