Overview

overview

10

Static

static

3

line.exe

windows7-x64

10

line.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c59dbb3db767ca5b1824447f5aabbb86523bb22a5d7ad38ed7c80164412253bb

  • Size

    304KB

  • Sample

    241229-mkzn5szjcz

  • MD5

    778b9da797996ecb92a6258d27c270c8

  • SHA1

    8f086300b441fbee8b8f9af7547b63b8421ad6dd

  • SHA256

    c59dbb3db767ca5b1824447f5aabbb86523bb22a5d7ad38ed7c80164412253bb

  • SHA512

    a213cc49b68953446f08f702dd5c3038c8fd4fce09b01fd151d1d2417fc8989284dd1cddeaea616a5afbb7947868f1ab09de0452a4c4200a95a763de56a1f4fd

  • SSDEEP

    6144:SrJSIVi5/VGPRl5eS/o69VIhVW6+UFA8EmyDLxStBXrpx9Z:SQzsl5eQ2VLUrD9St7xn

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      line.bin

    • Size

      683KB

    • MD5

      30edd259545038b637701849dc5973e0

    • SHA1

      337ec8065961475e1c210ea510cfe8b40adf8f95

    • SHA256

      800351c3a0ffe0f4582c98b053d4b59c30c581087823964e7be15af5d2767d52

    • SHA512

      001799c202adbff38d82aa7a5dfe5863b8933a09747544ed48a1b736369b60ad827bc250f8e690459d37d34049496e6845ee7b4144685019ef5898a36cbe6c48

    • SSDEEP

      12288:0iouGvscRqW8FvYKKCPOxoafEy+PlsqjGhH/LGE9:+uEscl8FJKCPOdMy+fj+HTGE

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks