Overview

overview

10

Static

static

1f6d89c592...1a.exe

windows7_x64

10

1f6d89c592...1a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f6d89c592e6ab42b7b8eac66d8ebad6c019fe8426d94dd9b03dfada6071dc1a.zip

  • Size

    575KB

  • Sample

    220103-y6fc6sbfd4

  • MD5

    050b270c2597845ebc6a9005f65ca9ba

  • SHA1

    55cf40b62a5b997f6a8bb7c335fdd9474fb10513

  • SHA256

    c3ed205a5bfa93a0c51ba436e97c431c7dbde5a53cba6defba8f7ace009e0d22

  • SHA512

    eebe7e8fab63bfe7774c095292978d89d3f5c67ffafdb9f094431f4933241ef3767c2e80231e086657ca84ec9c3f7d224bfd40865f2a75cdf8b92b1ba9fb3d91

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      1f6d89c592e6ab42b7b8eac66d8ebad6c019fe8426d94dd9b03dfada6071dc1a

    • Size

      1.1MB

    • MD5

      5ee0f68fb48c14662d45d26eceb665ff

    • SHA1

      6db78b80bb5e0dc31875690de686b233d3eabc8a

    • SHA256

      1f6d89c592e6ab42b7b8eac66d8ebad6c019fe8426d94dd9b03dfada6071dc1a

    • SHA512

      295bc60678a632a07b31e234f72c9d99f7bd8424774c504dec2239b4b6c8a4511aa7ca47d7e6a091d3b9fdd50b741064261fe9e7c29ac33217392c8d5eae36a4

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks