modiloader | 2b0faba04d2c97fc501009d42373513c79cca36818805cb363313ab4759f4aec | Triage

Sharing

General

Target

2b0faba04d2c97fc501009d42373513c79cca36818805cb363313ab4759f4aec
Size

556KB
Sample

221125-kr15faaa7t
MD5

207bb924d08efedf38dc6e627d4fc3de
SHA1

143719a12955990428fe15dc05a7c0acaa0c9947
SHA256

2b0faba04d2c97fc501009d42373513c79cca36818805cb363313ab4759f4aec
SHA512

f466d01bbb6e294e2ed3c0246bf2003259e9af8e77a0ed6ee4aaf95e729813d408987f37b39888ccc741f3d02cde5994ba13d7e5d7f1f37e58bdad9c2d12433a
SSDEEP

12288:D+u9nx2GjMY3XKfd/H/9PRdpLLpWRY6ke9KS:D+qnT9GH1PRdJL0S6D9t

Score

10^/10

modiloader persistence

Malware Config

Targets

- Target
  
  2b0faba04d2c97fc501009d42373513c79cca36818805cb363313ab4759f4aec
- Size
  
  556KB
- MD5
  
  207bb924d08efedf38dc6e627d4fc3de
- SHA1
  
  143719a12955990428fe15dc05a7c0acaa0c9947
- SHA256
  
  2b0faba04d2c97fc501009d42373513c79cca36818805cb363313ab4759f4aec
- SHA512
  
  f466d01bbb6e294e2ed3c0246bf2003259e9af8e77a0ed6ee4aaf95e729813d408987f37b39888ccc741f3d02cde5994ba13d7e5d7f1f37e58bdad9c2d12433a
- SSDEEP
  
  12288:D+u9nx2GjMY3XKfd/H/9PRdpLLpWRY6ke9KS:D+qnT9GH1PRdJL0S6D9t
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2