Overview

overview

10

Static

static

3

catalogue_..._0.exe

windows7-x64

10

catalogue_..._0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_03554a77d0269b8a651fca5c5e7e36e8d73d27f33c9c762e922d6f017373e324

  • Size

    337KB

  • Sample

    241229-rmj4patkhk

  • MD5

    d41b824379223caf3220cd53c08c24dd

  • SHA1

    96f83c4a13e5d73acc92235e3203f8dff634fc4d

  • SHA256

    03554a77d0269b8a651fca5c5e7e36e8d73d27f33c9c762e922d6f017373e324

  • SHA512

    19f93fa64738fbe20527a3afac6f1a6ab5dc1ecbb684ee605932d1ac579a04897bbf237cd4bdfc6672ff42c6e01c3da0cdd7f9e928aa046d998371b3eaef7d04

  • SSDEEP

    6144:JgTWuY1FJB1EygvzGiW+dqS/bi1lsG5DMsHeYNVHcHkrs:JgTIF7WvzGiW+drW179MsH/tcEA

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      catalogue_28092022_samples_list_revise_0/catalogue_28092022_samples_list_revise_0.exe

    • Size

      826KB

    • MD5

      5a4e75f0f4b071c7edfb3ac8e95ffc15

    • SHA1

      634dfbc2a2d9475c1140fa5b4d8a1efcc063b3e2

    • SHA256

      14432a0f459c599dcf7726e1fd8b0c2a602c12db9b7db6be009b9c884801b47c

    • SHA512

      5f828ee57e31d14693acc68f4bf96c9c4c68d37728c44a73be83fe37c96c3efc493a7dad74c16272335e73c205362051ba4c66d0a7bd2449eda3f1d2e62fd396

    • SSDEEP

      12288:5oJoADoX7GMkMFyvscMEA9y3ZJ5LgKnspollqP1onjD+26pbZe:6ex7GI3cMECyfx5sHenjD0pbZe

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks