Overview

overview

10

Static

static

3

e78f3c27ee...18.exe

windows7-x64

10

e78f3c27ee...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e78f3c27ee7a2f6f8591a10f7119f8d9_JaffaCakes118

  • Size

    652KB

  • Sample

    241212-we3y2s1rew

  • MD5

    e78f3c27ee7a2f6f8591a10f7119f8d9

  • SHA1

    503491a78ddadb380662ba09dd9e36a6a537fb1d

  • SHA256

    11c7a9f9e267b56a3de35b5f5566bc445e3e843200a8d9c04f291709d83df270

  • SHA512

    e5c86764a8ea48b1014f3d724181fa0ca069ca4c866b1cb962438b2f1e621c78929b5eaae898b7ab8e6896e9bfb0015ed8cc88842f139f7e88ec7fb24d896451

  • SSDEEP

    12288:yh4royScE8XokY8g4DnmNpT5yYFNSgUUVeuqOD7+CC0l5Csi8jHEgau:yKrd74gV7mNpT5RFNSxse3a7+N0XLieP

Score
10/10
modiloaderaspackv2discoverypersistencetrojan

Malware Config

Targets

    • Target

      e78f3c27ee7a2f6f8591a10f7119f8d9_JaffaCakes118

    • Size

      652KB

    • MD5

      e78f3c27ee7a2f6f8591a10f7119f8d9

    • SHA1

      503491a78ddadb380662ba09dd9e36a6a537fb1d

    • SHA256

      11c7a9f9e267b56a3de35b5f5566bc445e3e843200a8d9c04f291709d83df270

    • SHA512

      e5c86764a8ea48b1014f3d724181fa0ca069ca4c866b1cb962438b2f1e621c78929b5eaae898b7ab8e6896e9bfb0015ed8cc88842f139f7e88ec7fb24d896451

    • SSDEEP

      12288:yh4royScE8XokY8g4DnmNpT5yYFNSgUUVeuqOD7+CC0l5Csi8jHEgau:yKrd74gV7mNpT5RFNSxse3a7+N0XLieP

    Score
    10/10
    modiloaderaspackv2discoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks