modiloader | a64485cb9307dd21304432758886237871f3eafa0ed27265d50fe468141cb19a | Triage

Sharing

General

Target

Trojan-Ransom.Win32.Blocker.jzec-a64485cb9307dd21304432758886237871f3eafa0ed27265d50fe468141cb19a
Size

447KB
Sample

221107-kjss4agcd5
MD5

a902e0e2055f1a82157474c1a297c94d
SHA1

c7ad27b9fc871fb0e0bcc3eca16898115e9db86b
SHA256

a64485cb9307dd21304432758886237871f3eafa0ed27265d50fe468141cb19a
SHA512

19436501b7dad61e1d0f35e4d873047ce12c7b1fa964877afd095693b2d43ad2b6b4fbb3b1ce48316cf1287bd3204268a6e835be527408aad63b89f3128d4603
SSDEEP

6144:wLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXco6Im:E+u9nx2GjMY3XKfd/H/9PL6Im

Score

10^/10

modiloader persistence

Malware Config

Targets

- Target
  
  Trojan-Ransom.Win32.Blocker.jzec-a64485cb9307dd21304432758886237871f3eafa0ed27265d50fe468141cb19a
- Size
  
  447KB
- MD5
  
  a902e0e2055f1a82157474c1a297c94d
- SHA1
  
  c7ad27b9fc871fb0e0bcc3eca16898115e9db86b
- SHA256
  
  a64485cb9307dd21304432758886237871f3eafa0ed27265d50fe468141cb19a
- SHA512
  
  19436501b7dad61e1d0f35e4d873047ce12c7b1fa964877afd095693b2d43ad2b6b4fbb3b1ce48316cf1287bd3204268a6e835be527408aad63b89f3128d4603
- SSDEEP
  
  6144:wLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXco6Im:E+u9nx2GjMY3XKfd/H/9PL6Im
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2