Overview

overview

10

Static

static

3

Fnnwaxpjppvpui.exe

windows7-x64

10

Fnnwaxpjppvpui.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ae691c711ba77ec6b63188131fbee1bafa0cc4253f5902788e41cbf2fcade90d

  • Size

    544KB

  • Sample

    241229-f8n4zstpew

  • MD5

    8624d480e387c1ea192937f6adac8cd8

  • SHA1

    6471bc66d61a3524cd0eaa861e68a15565a2f8e6

  • SHA256

    ae691c711ba77ec6b63188131fbee1bafa0cc4253f5902788e41cbf2fcade90d

  • SHA512

    11668a4d6aa837a0d29ba3ea9e187f896d639efc13c5a87bccf597d1b8df0190a9a36d7f99fae10bb8c04dde4d1b9c8d5af9cbbdb8e400f62bfe7f248f765903

  • SSDEEP

    12288:PzRwd2TR/LFi4LJi0AGHdKXDKrZl9B1IUvf5bVY0AVNw4k+:Pqd2t/LFJikHeKr5ZbVt0X

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      Fnnwaxpjppvpui.exe

    • Size

      1.1MB

    • MD5

      d8fdc5279d7122d227ba5b4a0a79513c

    • SHA1

      04edcd948f8eee9d41b1fe31506271af72b20868

    • SHA256

      faac5f6037f14d4d1dcb0b34b555c89791b536ea01a8bafa8851f3659c0123d7

    • SHA512

      9a979d301a0ece2b95400b81dbbfc998a782c5c5a04dbf8439f1a0b4df6e6868f724a1aadcd4e3f2296b8ac361c719f11fd166fd4004f85b6734fc5f6f8260ec

    • SSDEEP

      24576:2V8t1SaLGaE27cMQimshpzuFtqMoXwbPfQ9W8AoqiVNW:2+tycyeMms

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks