Overview

overview

10

Static

static

1

6.exe

windows7-x64

10

6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c0b1b373052cd0dc08d965fa91bf690c53bd60b46d698ca2ad669f2b0073a8f9

  • Size

    566KB

  • Sample

    241225-yjat6svpgp

  • MD5

    a8b8181b66db238a8d6a4ff1436629cf

  • SHA1

    0416048aabf022fa47987e9589a605b1a2d4cc7e

  • SHA256

    c0b1b373052cd0dc08d965fa91bf690c53bd60b46d698ca2ad669f2b0073a8f9

  • SHA512

    ad0c6589f508cfe2d823bc2dd3b9bd26a179dd4f4440fe97aa0b4ed712d71f03d3baa85b420f2fd69491bf811350611a68f360d7851a60d9590d6bc7acd574a9

  • SSDEEP

    12288:/XaSDNAiWLJGNd6ThIcc8Q363CYmUUYKt1vWBxf9eSLm2h6PXs5:Ctb1cd6ehkcYK7vY1kSLX

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      6.bin

    • Size

      1.1MB

    • MD5

      c2e12061e06820ecd3a4356d81247a20

    • SHA1

      1b3ce4ae307613de86df05596a9c789482c71866

    • SHA256

      8f742856946e37df26c1a6440c03bf8f3f840c22371493f42bfa9652038520f6

    • SHA512

      bf1f4e5eb7ebf7e7fb2d43c1a046e4f8e7bd0e8fe189555b165c107a31fd1eb00067e3f10959fc54328f9d1c0c6e34b99b6fb60a815ff2e48375c5f2fc3ca589

    • SSDEEP

      12288:mMZdPNIZLk04tZqhKOQSiu8OG+suGrl/RUf7h4pcZeS/oakjjJjqudfqldItEhau:m4yutZFOzR81HlKf6cb/KjjtKj

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks