Overview

overview

10

Static

static

1

OC CVE6535...df.exe

windows7-x64

10

OC CVE6535...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_d3744422119abebfe19f00fde4f1d6ca771ca5b93b93ebbbf5d35a89f514a73a

  • Size

    429KB

  • Sample

    241229-bl2pcaxpbv

  • MD5

    e148c32ec375d2a05482bf70c8835f80

  • SHA1

    5f45ea699396be1d67c4ed4edb4c8d01db860399

  • SHA256

    d3744422119abebfe19f00fde4f1d6ca771ca5b93b93ebbbf5d35a89f514a73a

  • SHA512

    5fec138e01e04ec6d1a304c7b80c142ac314de8646db82e191b93bb4ae1f5364a5d9bf8915dfab380cff277b4bf76bbe9c15186c8a0d6d37738de5a9c9b89f5d

  • SSDEEP

    12288:+p3ACld8ozg1tZdYjMol8g4Ae2X509PLcj8SBJQWej:AQT4utcjXegFJ50K7Bg

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      OC CVE6535 _TVOP-MIO 10(C) 2020,pdf.exe

    • Size

      1.0MB

    • MD5

      30fd4a13202b81061093494a8c68ea9b

    • SHA1

      ce9b8b6922c0ae31841a24ca3ef611d3c0e8a171

    • SHA256

      e7def582e6c764fb35cad598da8b83da969897d37241402df8c8bac2b870432f

    • SHA512

      8f21190609bf4a04f84bdc453345f6922eb9afa84a8535a6b676aaf29e10b23d0152c83399e5f7dfb2fb031439e8e87919aa68c30b4e977649b5e7a1ef34ce3d

    • SSDEEP

      24576:O1BLam+mNN6U2Q/RvlNGnGe+95mPszaWpWPgE9d:O1+42WnmkzLpWPg

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks