Description
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
e2ec00adb32aea4d650f12ebb07e5c30ea4db55e5a8ef4e84f1b5d166f3c70b5
General
Target
Size
Sample
e2ec00adb32aea4d650f12ebb07e5c30ea4db55e5a8ef4e84f1b5d166f3c70b5
509KB
220520-w812jsfbbj
Score
10 /10
MD5
SHA1
SHA256
SHA512
d2205fb386a508899ba9e1a6d4654ed2
d3937f1d1900f7cac13b328c051b3bcaf577226a
e2ec00adb32aea4d650f12ebb07e5c30ea4db55e5a8ef4e84f1b5d166f3c70b5
31c584c7e04ea73df541a33a8cfbfe3424646d52c7734b5ff694047234d644a5de6882c916c37a8b72f32c496ff47b699f17e664cb65046f129b44ac2de4d3e9
Malware Config
Targets
Target
MD5
Filesize
e2ec00adb32aea4d650f12ebb07e5c30ea4db55e5a8ef4e84f1b5d166f3c70b5
d2205fb386a508899ba9e1a6d4654ed2
509KB
Score
10/10
SHA1
SHA256
SHA512
d3937f1d1900f7cac13b328c051b3bcaf577226a
e2ec00adb32aea4d650f12ebb07e5c30ea4db55e5a8ef4e84f1b5d166f3c70b5
31c584c7e04ea73df541a33a8cfbfe3424646d52c7734b5ff694047234d644a5de6882c916c37a8b72f32c496ff47b699f17e664cb65046f129b44ac2de4d3e9
Tags
Signatures
-
ModiLoader, DBatLoader
-
ModiLoader First Stage
-
Adds Run key to start application
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks