modiloader | e235404841fc85ad1d490f2ae5f5e33e74cea395ece0ddd1683ba78d463b5aa4 | Triage

Submit
Reports

Overview

overview

Static

static

8

e235404841...a4.exe

windows7-x64

e235404841...a4.exe

windows10-2004-x64

7

Sharing

General

Target

e235404841fc85ad1d490f2ae5f5e33e74cea395ece0ddd1683ba78d463b5aa4
Size

1.2MB
Sample

221123-z5rkgshf2x
MD5

350a028daf8612cefa400032126afeea
SHA1

b3b0eaabbd19df7bb0e167bcb77889655dfb291a
SHA256

e235404841fc85ad1d490f2ae5f5e33e74cea395ece0ddd1683ba78d463b5aa4
SHA512

68422ccca073c3012a844135ff6a517b54ef769d2ee95da6e1ae6a6a2a35a914091e66009fd80724c5544f69812c0c131d0e6502c1a1250cd2d8aa5df302d2ff
SSDEEP

24576:5GSvXcYr88kMQoNazpGWUk1dJkZlkB6tXYvDu0BbeK9j27jnjN/QR5+C7rFB1:5G2Xc+9kVVzjB5vyug9c5Z3Fj

Score

10^/10

modiloader aspackv2 evasion themida trojan

Static task

static1

aspackv2 themida

2 signatures

Behavioral task

behavioral1

Sample

e235404841fc85ad1d490f2ae5f5e33e74cea395ece0ddd1683ba78d463b5aa4.exe

Resource

win7-20221111-en

modiloader evasion themida trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

e235404841fc85ad1d490f2ae5f5e33e74cea395ece0ddd1683ba78d463b5aa4.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  e235404841fc85ad1d490f2ae5f5e33e74cea395ece0ddd1683ba78d463b5aa4
- Size
  
  1.2MB
- MD5
  
  350a028daf8612cefa400032126afeea
- SHA1
  
  b3b0eaabbd19df7bb0e167bcb77889655dfb291a
- SHA256
  
  e235404841fc85ad1d490f2ae5f5e33e74cea395ece0ddd1683ba78d463b5aa4
- SHA512
  
  68422ccca073c3012a844135ff6a517b54ef769d2ee95da6e1ae6a6a2a35a914091e66009fd80724c5544f69812c0c131d0e6502c1a1250cd2d8aa5df302d2ff
- SSDEEP
  
  24576:5GSvXcYr88kMQoNazpGWUk1dJkZlkB6tXYvDu0BbeK9j27jnjN/QR5+C7rFB1:5G2Xc+9kVVzjB5vyug9c5Z3Fj
Score

10^/10

modiloader evasion themida trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- UAC bypass
  evasion trojan
- ModiLoader Second Stage
- Loads dropped DLL
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

aspackv2themida

behavioral1

modiloaderevasionthemidatrojan

behavioral2

© 2018-2024

Terms | Privacy