Overview

overview

10

Static

static

1

25527a6033...93.exe

windows7-x64

10

25527a6033...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_fbeb7728a4d3714f7ce1e0d4f711d2291fc297b59fbf3b12ac759dc22686bae4

  • Size

    624KB

  • Sample

    241227-be3ytsxmel

  • MD5

    c60efcec283070aa0eaefe7bd68fecec

  • SHA1

    d6b88fcecfeada2c8507263fe50f75325f6ad5a4

  • SHA256

    fbeb7728a4d3714f7ce1e0d4f711d2291fc297b59fbf3b12ac759dc22686bae4

  • SHA512

    d01ac9824bfb8932a8ce2adbc14801c0f35f88dbe25522134370848495e23d0c9b28b0b89fc531465f598953556adb86d0e527f148a7e1908437ffacd5f732d1

  • SSDEEP

    12288:iWhxpGCPg1czOngc7f9S+r6ruERrh/n3MWXspP8w4Z87BWmpPYiX+WRU4QGFgrQ:LKSe/ngXSynD/c+GPPMOFDRRU4QGF2Q

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      25527a6033397bcfd789e4cbc4c13693.exe

    • Size

      1.1MB

    • MD5

      25527a6033397bcfd789e4cbc4c13693

    • SHA1

      2c8a62ea0021e98171d16fefd8011ee2b2feec0b

    • SHA256

      c3daf1d20367ee0d7a849419594356ec6cad7c9169107b332c64ab67cb739823

    • SHA512

      029ba3bb81fe33e98c9ee05723bf099f482f63b17435381b22de237f341496e31169f297df68570a19a2af4d6b6e234d2eaec2d12cac126b9bda3d71a89f3c8d

    • SSDEEP

      24576:yNYgXvA6gXYv6Ux1tWEFsdhmOZFNDP3fun9Q7:yNYS6E1tWEFKmOZju9Q7

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks