Overview

overview

10

Static

static

3

RFQ_MOLECO...df.exe

windows7-x64

10

RFQ_MOLECO...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0331a099c9af7bb1c89ff82cad81ef5f1a80272706ecb004aca8513d728abe0f

  • Size

    364KB

  • Sample

    241222-md2vxsvkhp

  • MD5

    1df1b7570d367ff7473f7e21018bebc6

  • SHA1

    b9bc5d7f80e975e1bc0659a73e68d00d953551af

  • SHA256

    0331a099c9af7bb1c89ff82cad81ef5f1a80272706ecb004aca8513d728abe0f

  • SHA512

    1d8882d1b2ea36e82dfe77a26346553a39699c330e66a7362a8cd69d7570273476321ce482245e3ad5e8f0b674abc8a348829eba1e4ed958721cd1da11a57f3c

  • SSDEEP

    6144:SLVr5nWOaFuFznv1PqeopjyhcoSHtFWeOx0ToFTMnhIAOaGxjNqsPjPP:SRRDFznozFOx00FTKCAg9vPjPP

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      RFQ_MOLECOR_14416 URGENTE,pdf.exe

    • Size

      742KB

    • MD5

      6bce7c8b1a25460c5037c2d38afe14f9

    • SHA1

      5875151673b30398910e0e950e06f5018fdbd642

    • SHA256

      92b00706984c7c417625397155bc04772ad6a821a271e1ad490dda20643d387d

    • SHA512

      cb2be4f9eebe6aed03fb2c6569ec679b9eae29836d94a2b44bd59d4d1eec9f3c9e2247c4afaf6f6b4863b439cd780da5c3e656472257e5d699c3c4df0678a6eb

    • SSDEEP

      12288:vFtHRwMpWIIyKj9X1WxQ3jC0CJVYT+R0ws8YxX2ujF5JjFWVJq2O:vFtxwR9uwvQYYdsU+TJ581O

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks