Overview

overview

10

Static

static

0323126277...27.exe

windows7-x64

10

0323126277...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03231262773662516627.exe

  • Size

    767KB

  • Sample

    221123-ljr28sbe64

  • MD5

    36bfbbc95d2597b3961e49d25449a5b6

  • SHA1

    39bfe69a283e1a9a3120af9bd9df8851bc12c61b

  • SHA256

    83935adb12e30326b0a1e7c5e835032e0d6814704f199ba2cc486b21d64d21d2

  • SHA512

    1e02abbdec65db90572972dc674df67e726d2b3fe38c045e6da53ea80dcc5bf5205a4062f756f7de5a2929394d88f1e36c706026574b3707f2a502fb6fb03e35

  • SSDEEP

    12288:iOrAkZrlpZxc3NKqgw9ONuRJoo5YqTdTB2O4rwSMpxwhx+g:is3hp4c6/aq5oOqLM2xh

Score
10/10
modiloadertrojan

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://onedrive.live.com/download?cid=E0CF7F9E6AAF27EF&resid=E0CF7F9E6AAF27EF%21818&authkey=AAhEuBv3snM3JmY

Targets

    • Target

      03231262773662516627.exe

    • Size

      767KB

    • MD5

      36bfbbc95d2597b3961e49d25449a5b6

    • SHA1

      39bfe69a283e1a9a3120af9bd9df8851bc12c61b

    • SHA256

      83935adb12e30326b0a1e7c5e835032e0d6814704f199ba2cc486b21d64d21d2

    • SHA512

      1e02abbdec65db90572972dc674df67e726d2b3fe38c045e6da53ea80dcc5bf5205a4062f756f7de5a2929394d88f1e36c706026574b3707f2a502fb6fb03e35

    • SSDEEP

      12288:iOrAkZrlpZxc3NKqgw9ONuRJoo5YqTdTB2O4rwSMpxwhx+g:is3hp4c6/aq5oOqLM2xh

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks