Overview

overview

10

Static

static

10

951c352653...c8.exe

windows7-x64

8

951c352653...c8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    951c352653556f4a856e327db94c359cc82b452ab36660a0e27c7f9428f8a4c8

  • Size

    196KB

  • Sample

    221126-cc9h9sge91

  • MD5

    2798ffe8ecee2781804dc2db89e6d965

  • SHA1

    97f415892e99d53f19d013893cd18e96c0d3698d

  • SHA256

    951c352653556f4a856e327db94c359cc82b452ab36660a0e27c7f9428f8a4c8

  • SHA512

    d349f8370a6018187d1a272597465529a7938df28c7971d4142e9447c3266d1f8ca6bb7d39996deb6869b1a4e375c26ebbc4770744f4f63669c9ff44e2c8ce98

  • SSDEEP

    3072:6DeIb32lxEo16cc9fjw8hD5z0llx2VtJxBVhLJ:ab3kEo1BWj/hx078V9d

Score
10/10
modiloader

Malware Config

Targets

    • Target

      951c352653556f4a856e327db94c359cc82b452ab36660a0e27c7f9428f8a4c8

    • Size

      196KB

    • MD5

      2798ffe8ecee2781804dc2db89e6d965

    • SHA1

      97f415892e99d53f19d013893cd18e96c0d3698d

    • SHA256

      951c352653556f4a856e327db94c359cc82b452ab36660a0e27c7f9428f8a4c8

    • SHA512

      d349f8370a6018187d1a272597465529a7938df28c7971d4142e9447c3266d1f8ca6bb7d39996deb6869b1a4e375c26ebbc4770744f4f63669c9ff44e2c8ce98

    • SSDEEP

      3072:6DeIb32lxEo16cc9fjw8hD5z0llx2VtJxBVhLJ:ab3kEo1BWj/hx078V9d

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks