Overview

overview

10

Static

static

file.exe

windows7_x64

10

file.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    file.exe
  • Size 748KB
  • Sample210324-nte7ed9ekj
  • SHA256 deabb312ade9d16c64ea491e5cf9477e1b98f2c5cda72ab2cb1b8b75af558d31
  • MD5 SHA1 SHA512
Score
10/10
modiloadernetwirebotnetpersistencestealertrojan

Malware Config

Targets

    • Target
      file.exe
    • Size 748KB
    • SHA256 deabb312ade9d16c64ea491e5cf9477e1b98f2c5cda72ab2cb1b8b75af558d31
    • MD5 SHA1 SHA512
    Score
    10/10
    modiloaderpersistencetrojannetwirebotnetstealer

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks