Overview

overview

10

Static

static

1

Maksājuma...15.exe

windows7-x64

10

Maksājuma...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b6b4bb26c22f33403e404f11079e781b2e913c436dbf789d3a2e277d8e570420

  • Size

    566KB

  • Sample

    241223-rbgjes1pdv

  • MD5

    5f9ba6f068fb0d3eaa603c8534abe396

  • SHA1

    dd39d45d5e3a691581db2ff0236759694604e88c

  • SHA256

    b6b4bb26c22f33403e404f11079e781b2e913c436dbf789d3a2e277d8e570420

  • SHA512

    8ba84ea024c5e63533e740f71b0c7cac4a61bc16df806c69f2ab467db3f85242b75a083140c6eca7cbedad32f09929a6c6f67b6bfd1b76bc7651f7d0a58c38f0

  • SSDEEP

    12288:k+jyDD6qNgOtTzjAf+4h7xBuMcpqrmOIiQTCCZaqGhY1bdWeG7Am:kOm/NkWatIJ0DPQ+sGhYqeGz

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Extracted

Family

modiloader

C2

https://cdn.discordapp.com/attachments/753549570230976536/770513688603131934/Jttndes

Targets

    • Target

      Maksājuma dokuments 10B715.exe

    • Size

      1.1MB

    • MD5

      95fc7545ef486575c2bfec6c7dedc5a5

    • SHA1

      a367210a638b5aecd711ec6e407cec18424d84f1

    • SHA256

      cbf282ed60bfbd76a602b9021c83546e781f8797e4b1430fc0dbf6528544b059

    • SHA512

      520a831bdad271a76f51214a278dfe86dc1c6065da402af623caca3c8f1b6704a9740158b290db89b7a98ffc1a78a80401248a14ec7b7b0195aa3bbae6926953

    • SSDEEP

      12288:gJROS/D7RYUfXkIlC+23Oy55Wf/lJrQGX/uV9S7AlPBbrEZlgfkmHvXbCyVsQHwQ:gP3taIH23P5IJgqU3rLCX9Q

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks