Overview

overview

10

Static

static

3

orden pdf.exe

windows7-x64

10

orden pdf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6245fd0291090847fb869aa84e8020975c91d7254b6146e7d5c1d3bb8e462816

  • Size

    627KB

  • Sample

    241223-3lk55svnax

  • MD5

    5048cfa7b69c932cbfa0b4c75f475c32

  • SHA1

    182c29a05b8aa7985ec9296989d0916c312bdcba

  • SHA256

    6245fd0291090847fb869aa84e8020975c91d7254b6146e7d5c1d3bb8e462816

  • SHA512

    3061b3f1c3ad14fd0cef0ab5b5f90d166635909a6c47c98345a42a98e780d1163be337d57b3440f7dec0c57614988c6cbd475332aaaa9d82553b754ff630e792

  • SSDEEP

    12288:dcaLXqFqp+tIB07RZS75XYphhj8cgVtEtpY8SN9CjeKKzd/Tdr:OaziqptGdk+8VozYZ9Cil7h

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      orden pdf.exe

    • Size

      992KB

    • MD5

      567514749532f410dc6c1c2edb544218

    • SHA1

      8d343ddf387a9c8ad878e203bbcfefaeb3a1b66d

    • SHA256

      7c9d431fdecc3270f72b5345965482158292f5072e4e6a4ba188634126681e29

    • SHA512

      b2c3234ea1eafeb16c6ae9102c1fe8c6a5e4d02cd02e15d0910fe2fa5e151f2546217e73225988e3bc5dba53acb93190f4ed6ce1e500c2f08ef94e3cf98f41bc

    • SSDEEP

      24576:87Je3RHKC7+5fxxViZhPYpnSZqAEuoLI9:8sqvCASkAEuoLM

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks