Overview

overview

10

Static

static

3

DANNIK Ltd...df.exe

windows7-x64

10

DANNIK Ltd...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_bbca37177feac0ce7b1c0597f9ca3a56df516153713caa7621ef0ca02961572c

  • Size

    568KB

  • Sample

    241223-rtrr4sskds

  • MD5

    1e4157aa08719efa511b0f1c44c5bec0

  • SHA1

    fbdbc8a2fe40423e4a9634913b412f430662a4ea

  • SHA256

    bbca37177feac0ce7b1c0597f9ca3a56df516153713caa7621ef0ca02961572c

  • SHA512

    fad6248c2131c473f7d4f6a6abccd39d42a50dd461100f6a314fd0945acc72c18fe4ce62283383d09e8fc2b01ef66a37cc23aac6e0b540521676817e39ce78d9

  • SSDEEP

    12288:F8B2yzhBGv1Re8EI0XwuH6w2CkjUUfVxq5meeKu9+6ousUmj:F8Qy1BGv1T9CtkoUfH7Oy++pA

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      DANNIK Ltd._New emri,pdf.exe

    • Size

      1.0MB

    • MD5

      3a8c31fefde331a95b68a34e857bc914

    • SHA1

      b09326d8188976a9bba0c1dc9d3bf3d21a582f8b

    • SHA256

      b4b90540d5f6ce9463ce4a062f9dd773c5af60e1ec42e713aee9d361aa817b7e

    • SHA512

      b57090e097ee59f3a73e3d06086d2b24c3ab43c1caa4e9946386d93ef270b2924c2afcc9a169717cfd6c4b670f080fc5521d9eff2cca7c3350101a3b5d11d3c9

    • SSDEEP

      12288:JmF8ukZ1BjH652L9a3ZV6ImC/KGaIEfrcSjzMYIO3pxhOtFuhe3CL+NdJydmf:JywJjf9QVOg6zZ3nheu8swJ

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks