Overview

overview

10

Static

static

3

ee02eade4c...18.exe

windows7-x64

10

ee02eade4c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee02eade4c315d504245f50f2539c131_JaffaCakes118

  • Size

    605KB

  • Sample

    241214-kzqnnsxkg1

  • MD5

    ee02eade4c315d504245f50f2539c131

  • SHA1

    57f73d114d7185e1f2bf951f88c50ebe5d058473

  • SHA256

    d9adda3172547f30a20cd0f7ba8b58738a46b4aeae455de4162f2c4f4d7c7422

  • SHA512

    d43dd311ba55b064ac7e5979eecac94d09b67115c87dd425bc9647b1fc6a3810943b31edd919ff9a9ad632bc4dc812e9d5461bab30bb88553fbf71a2d17bb006

  • SSDEEP

    12288:eqAOiRRXCHKEysMEPjSrvpVqA4vdIZg/gx8VhjdOFUa8AwW:etOiKMEuzbZg/g4hj2Jv

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ee02eade4c315d504245f50f2539c131_JaffaCakes118

    • Size

      605KB

    • MD5

      ee02eade4c315d504245f50f2539c131

    • SHA1

      57f73d114d7185e1f2bf951f88c50ebe5d058473

    • SHA256

      d9adda3172547f30a20cd0f7ba8b58738a46b4aeae455de4162f2c4f4d7c7422

    • SHA512

      d43dd311ba55b064ac7e5979eecac94d09b67115c87dd425bc9647b1fc6a3810943b31edd919ff9a9ad632bc4dc812e9d5461bab30bb88553fbf71a2d17bb006

    • SSDEEP

      12288:eqAOiRRXCHKEysMEPjSrvpVqA4vdIZg/gx8VhjdOFUa8AwW:etOiKMEuzbZg/g4hj2Jv

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks