modiloader | 3b149db5b291ef19c1ccd8168cffa6a42944a8458e142a73f66e1f04a973e5d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.jzec-3b149db5b291ef19c1ccd8168cffa6a42944a8458e142a73f66e1f04a973e5d8
Size

746KB
Sample

221107-jwhyzshdhj
MD5

25efd1d9d1ad7e1547417af3896c8ea7
SHA1

81af3f9681660a9ff29a9b2366aabaeb7010f825
SHA256

3b149db5b291ef19c1ccd8168cffa6a42944a8458e142a73f66e1f04a973e5d8
SHA512

a1331c92f997b23145a24f3494929fbf4a7b54975e55bbf9741f78f0c215436869a0f9d4ee321fcc434893e0fea19d109d9f636aeb0937a6b0d73803fbdcd238
SSDEEP

12288:4+u9nx2GjMY3XKfd/H/9P5yRSVhez/8PPVkfQplM:4+qnT9GH1P5g8fHVk

Score

10^/10

modiloader persistence

Malware Config

Targets

- Target
  
  Trojan-Ransom.Win32.Blocker.jzec-3b149db5b291ef19c1ccd8168cffa6a42944a8458e142a73f66e1f04a973e5d8
- Size
  
  746KB
- MD5
  
  25efd1d9d1ad7e1547417af3896c8ea7
- SHA1
  
  81af3f9681660a9ff29a9b2366aabaeb7010f825
- SHA256
  
  3b149db5b291ef19c1ccd8168cffa6a42944a8458e142a73f66e1f04a973e5d8
- SHA512
  
  a1331c92f997b23145a24f3494929fbf4a7b54975e55bbf9741f78f0c215436869a0f9d4ee321fcc434893e0fea19d109d9f636aeb0937a6b0d73803fbdcd238
- SSDEEP
  
  12288:4+u9nx2GjMY3XKfd/H/9P5yRSVhez/8PPVkfQplM:4+qnT9GH1P5g8fHVk
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2