Overview

overview

10

Static

static

10

1c30985108...18.exe

windows7-x64

10

1c30985108...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c309851083983587ffe62b1c6a7cf18_JaffaCakes118

  • Size

    98KB

  • Sample

    240701-xy925svcjb

  • MD5

    1c309851083983587ffe62b1c6a7cf18

  • SHA1

    48b9622b9c32b2c153c5b131846be0af73513251

  • SHA256

    d1c21ad3d39f1c3502a800d1d082f31fb4ca78c519b75c5c82148fc7f23fac55

  • SHA512

    80db99c16ed9c4b521dbaea3b692e4bf75ab8a00653e053dbaddcd1cb5173f384d34f1d3b21a08ae535d79a8c57ecb4c7d950fde41a2e734bda983785a80ad6b

  • SSDEEP

    3072:G3quF7c3jHz7YInISas6+ZLxkauVFXri:mJc3j/p++ZLxkdnXr

Score
10/10
modiloadertrojanupx

Malware Config

Targets

    • Target

      1c309851083983587ffe62b1c6a7cf18_JaffaCakes118

    • Size

      98KB

    • MD5

      1c309851083983587ffe62b1c6a7cf18

    • SHA1

      48b9622b9c32b2c153c5b131846be0af73513251

    • SHA256

      d1c21ad3d39f1c3502a800d1d082f31fb4ca78c519b75c5c82148fc7f23fac55

    • SHA512

      80db99c16ed9c4b521dbaea3b692e4bf75ab8a00653e053dbaddcd1cb5173f384d34f1d3b21a08ae535d79a8c57ecb4c7d950fde41a2e734bda983785a80ad6b

    • SSDEEP

      3072:G3quF7c3jHz7YInISas6+ZLxkauVFXri:mJc3j/p++ZLxkdnXr

    Score
    10/10
    modiloadertrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks