Overview

overview

10

Static

static

1

1f6d89c592...1a.exe

windows7-x64

10

1f6d89c592...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c3ed205a5bfa93a0c51ba436e97c431c7dbde5a53cba6defba8f7ace009e0d22

  • Size

    575KB

  • Sample

    241225-x2sl9stncv

  • MD5

    050b270c2597845ebc6a9005f65ca9ba

  • SHA1

    55cf40b62a5b997f6a8bb7c335fdd9474fb10513

  • SHA256

    c3ed205a5bfa93a0c51ba436e97c431c7dbde5a53cba6defba8f7ace009e0d22

  • SHA512

    eebe7e8fab63bfe7774c095292978d89d3f5c67ffafdb9f094431f4933241ef3767c2e80231e086657ca84ec9c3f7d224bfd40865f2a75cdf8b92b1ba9fb3d91

  • SSDEEP

    12288:vQxnsvznjNYiED3/O7Q1KbgE+4uXNlqlVpoXPrbxqk3:vF5Vi3/O7QAbgmunql4hJ3

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      1f6d89c592e6ab42b7b8eac66d8ebad6c019fe8426d94dd9b03dfada6071dc1a

    • Size

      1.1MB

    • MD5

      5ee0f68fb48c14662d45d26eceb665ff

    • SHA1

      6db78b80bb5e0dc31875690de686b233d3eabc8a

    • SHA256

      1f6d89c592e6ab42b7b8eac66d8ebad6c019fe8426d94dd9b03dfada6071dc1a

    • SHA512

      295bc60678a632a07b31e234f72c9d99f7bd8424774c504dec2239b4b6c8a4511aa7ca47d7e6a091d3b9fdd50b741064261fe9e7c29ac33217392c8d5eae36a4

    • SSDEEP

      12288:wsBMK53JiGWJs/HtuuQtIxDt9Fni6xh3xOw52LXb/08fVez+A/dk60xaO0ZH0ulr:woHRWs4W1tfiEkXbGzWcRb6i

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks