Overview

overview

10

Static

static

21ff3661fd...e6.exe

windows7_x64

10

21ff3661fd...e6.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6

  • Size

    1.0MB

  • Sample

    220420-ewlyesahe7

  • MD5

    6adcba88a16f508ec905410cbb050894

  • SHA1

    d56cf76e5dac45f67a4e20e6a5b5b909d0f81b7d

  • SHA256

    21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6

  • SHA512

    b0d6058716d4bf1f9b82a80cf53f3663848a1a984b2509807606b932d47f584eb7e20064328e287eff1a906e3cd9e8fe1b9b95089a8ad7d38217e07370a7e4df

Score
10/10
modiloadertrojan

Malware Config

Extracted

Family

modiloader

C2

https://cdn.discordapp.com/attachments/762895490362638339/771585630530306059/Swdlert

Targets

    • Target

      21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6

    • Size

      1.0MB

    • MD5

      6adcba88a16f508ec905410cbb050894

    • SHA1

      d56cf76e5dac45f67a4e20e6a5b5b909d0f81b7d

    • SHA256

      21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6

    • SHA512

      b0d6058716d4bf1f9b82a80cf53f3663848a1a984b2509807606b932d47f584eb7e20064328e287eff1a906e3cd9e8fe1b9b95089a8ad7d38217e07370a7e4df

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks