Overview

overview

10

Static

static

51a4e8aca1...ec.exe

windows7-x64

10

51a4e8aca1...ec.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    51a4e8aca18a943cdbe7bfd95c029f01f6088f92d168b2a266c259756e5757ec

  • Size

    260KB

  • Sample

    220919-dj4r2ahean

  • MD5

    34aa6f662092d759b357345a058bde51

  • SHA1

    52cd5060b7e7040dfb6bd650d0a292cc3f80a7ec

  • SHA256

    51a4e8aca18a943cdbe7bfd95c029f01f6088f92d168b2a266c259756e5757ec

  • SHA512

    a1b1d4f640fcdbc1349b0704588ca9ab47bf6aee66744c712f2798cf6135120711b2d8abc5f50ddf4bfb4a96e81df730c4346184cc3e8b1e1edd933e37154031

  • SSDEEP

    3072:DFEr4jgsR1Em5jchp+y2h9ZSd/rSINGZ+Rb4QYHVjgLZFm8ewMtAjns5e7FTV1Eq:DFmCR1qpzaiUlZRjgFnewMtAjn3Gps7

Score
10/10
modiloaderpersistencetrojanupx

Malware Config

Targets

    • Target

      51a4e8aca18a943cdbe7bfd95c029f01f6088f92d168b2a266c259756e5757ec

    • Size

      260KB

    • MD5

      34aa6f662092d759b357345a058bde51

    • SHA1

      52cd5060b7e7040dfb6bd650d0a292cc3f80a7ec

    • SHA256

      51a4e8aca18a943cdbe7bfd95c029f01f6088f92d168b2a266c259756e5757ec

    • SHA512

      a1b1d4f640fcdbc1349b0704588ca9ab47bf6aee66744c712f2798cf6135120711b2d8abc5f50ddf4bfb4a96e81df730c4346184cc3e8b1e1edd933e37154031

    • SSDEEP

      3072:DFEr4jgsR1Em5jchp+y2h9ZSd/rSINGZ+Rb4QYHVjgLZFm8ewMtAjns5e7FTV1Eq:DFmCR1qpzaiUlZRjgFnewMtAjn3Gps7

    Score
    10/10
    modiloaderpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modifies WinLogon for persistence

      persistence

    • ModiLoader Second Stage

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks