Overview

overview

10

Static

static

b8b08595b8...07.exe

windows7-x64

10

b8b08595b8...07.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8b08595b88cd5c693b52f1de463b726162c5fac4c47feac23ce074979ad0b07

  • Size

    585KB

  • Sample

    221123-z5g12see56

  • MD5

    44d49adbc732c2d3141c218499a64f9e

  • SHA1

    82885cfa7f37181368e57861c0e571bbe312546c

  • SHA256

    b8b08595b88cd5c693b52f1de463b726162c5fac4c47feac23ce074979ad0b07

  • SHA512

    cceb6e60921e63610b1405d62af189deb02368f8136e2aa7257108dae6c69ff10b8c929c720580a15d00952ff4dd84185e9ef7d1631a319e23ac8ee275018a72

  • SSDEEP

    12288:v0hLiV/VD4PAdpiuU+F3Z4mxxwDqVTVOCB:v0FiAPY++QmXHVTzB

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      b8b08595b88cd5c693b52f1de463b726162c5fac4c47feac23ce074979ad0b07

    • Size

      585KB

    • MD5

      44d49adbc732c2d3141c218499a64f9e

    • SHA1

      82885cfa7f37181368e57861c0e571bbe312546c

    • SHA256

      b8b08595b88cd5c693b52f1de463b726162c5fac4c47feac23ce074979ad0b07

    • SHA512

      cceb6e60921e63610b1405d62af189deb02368f8136e2aa7257108dae6c69ff10b8c929c720580a15d00952ff4dd84185e9ef7d1631a319e23ac8ee275018a72

    • SSDEEP

      12288:v0hLiV/VD4PAdpiuU+F3Z4mxxwDqVTVOCB:v0FiAPY++QmXHVTzB

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks