modiloader | facc304aaa9bd0f91ae196a249984ef62457b2dbe324e3f65adefd5e53fc5982 | Triage

Sharing

General

Target

Trojan-Ransom.Win32.Blocker.jzec-facc304aaa9bd0f91ae196a249984ef62457b2dbe324e3f65adefd5e53fc5982
Size

451KB
Sample

221107-k474hsbfdl
MD5

ad671a6ce9165b1519ee03a99feaced4
SHA1

a48f576432f020d18476b331a7678f4b078830a7
SHA256

facc304aaa9bd0f91ae196a249984ef62457b2dbe324e3f65adefd5e53fc5982
SHA512

4bda357b74edf82ed7aa5a3e1310f476aaca4032d83074122f982fd4ebb5efb43eb25bd05232818b389dec81984e0d36e019cd1db710bacb308ff036d519ed94
SSDEEP

6144:wLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPX/s64K:E+u9nx2GjMY3XKfd/H/9P064K

Score

10^/10

modiloader persistence

Malware Config

Targets

- Target
  
  Trojan-Ransom.Win32.Blocker.jzec-facc304aaa9bd0f91ae196a249984ef62457b2dbe324e3f65adefd5e53fc5982
- Size
  
  451KB
- MD5
  
  ad671a6ce9165b1519ee03a99feaced4
- SHA1
  
  a48f576432f020d18476b331a7678f4b078830a7
- SHA256
  
  facc304aaa9bd0f91ae196a249984ef62457b2dbe324e3f65adefd5e53fc5982
- SHA512
  
  4bda357b74edf82ed7aa5a3e1310f476aaca4032d83074122f982fd4ebb5efb43eb25bd05232818b389dec81984e0d36e019cd1db710bacb308ff036d519ed94
- SSDEEP
  
  6144:wLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPX/s64K:E+u9nx2GjMY3XKfd/H/9P064K
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2