modiloader | c679a35655eaab97c4e62f87ac97f053de9cc478dcc795d84b0383b35bccf241 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c679a35655eaab97c4e62f87ac97f053de9cc478dcc795d84b0383b35bccf241
Size

508KB
Sample

221003-td37badge8
MD5

6253183782e5238c43e139654aaaf974
SHA1

a32b560802eca919150c2a42b9e887d28c69c9aa
SHA256

c679a35655eaab97c4e62f87ac97f053de9cc478dcc795d84b0383b35bccf241
SHA512

7352c67596eda9fbc091c36889792dd503d2e1d588761f427e69f8239527e6bf5be8ea14c7aa56c9fb3a3425d27ad08066660ef92976ec7e5296c30c4f7b413a
SSDEEP

6144:35jZRGjHzpeXbOO2yfwpEf7TXtmDADTyRM2/DdaqifmzNSCBj1tBl9:35jZSp2KSfwtA66EdZifQSst3

Score

10^/10

modiloader

Malware Config

Targets

- Target
  
  c679a35655eaab97c4e62f87ac97f053de9cc478dcc795d84b0383b35bccf241
- Size
  
  508KB
- MD5
  
  6253183782e5238c43e139654aaaf974
- SHA1
  
  a32b560802eca919150c2a42b9e887d28c69c9aa
- SHA256
  
  c679a35655eaab97c4e62f87ac97f053de9cc478dcc795d84b0383b35bccf241
- SHA512
  
  7352c67596eda9fbc091c36889792dd503d2e1d588761f427e69f8239527e6bf5be8ea14c7aa56c9fb3a3425d27ad08066660ef92976ec7e5296c30c4f7b413a
- SSDEEP
  
  6144:35jZRGjHzpeXbOO2yfwpEf7TXtmDADTyRM2/DdaqifmzNSCBj1tBl9:35jZSp2KSfwtA66EdZifQSst3
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2