modiloader | 17c572eef3a4c27a2a28641206ef00066fc3bda80fd01ddb742d4f24675ccc86 | Triage

Sharing

General

Target

17c572eef3a4c27a2a28641206ef00066fc3bda80fd01ddb742d4f24675ccc86
Size

120KB
Sample

221123-3l4x9acg47
MD5

00d72d8f972ed384ed5b018fe1b68e66
SHA1

2db63c0c678f39018f18c520f50d6b3b0021b682
SHA256

17c572eef3a4c27a2a28641206ef00066fc3bda80fd01ddb742d4f24675ccc86
SHA512

1407c866c9d6273253580437acd05f64002d6e8cbe97d071874711d64eede13dc0a64cd1c6ab2abe2c73dfdcad6930ac8f30ec1fefd2815782158300a8630bad
SSDEEP

3072:dMeZVVcB8v3tajzekZQSLzS9QQUbM81CYTXim6:mehvQX/ZfLxQUbMi

Score

10^/10

modiloader

Malware Config

Targets

- Target
  
  17c572eef3a4c27a2a28641206ef00066fc3bda80fd01ddb742d4f24675ccc86
- Size
  
  120KB
- MD5
  
  00d72d8f972ed384ed5b018fe1b68e66
- SHA1
  
  2db63c0c678f39018f18c520f50d6b3b0021b682
- SHA256
  
  17c572eef3a4c27a2a28641206ef00066fc3bda80fd01ddb742d4f24675ccc86
- SHA512
  
  1407c866c9d6273253580437acd05f64002d6e8cbe97d071874711d64eede13dc0a64cd1c6ab2abe2c73dfdcad6930ac8f30ec1fefd2815782158300a8630bad
- SSDEEP
  
  3072:dMeZVVcB8v3tajzekZQSLzS9QQUbM81CYTXim6:mehvQX/ZfLxQUbMi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2