Overview

overview

10

Static

static

8

cc0790b613...c8.exe

windows7-x64

10

cc0790b613...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc0790b6136ea16f89b659bfc71bc57d523f57fb6bced65551e453d2fb99e5c8

  • Size

    143KB

  • Sample

    221126-ccrnfsdd32

  • MD5

    86f60d48450d7f26918b7faf4128fe7e

  • SHA1

    58d5bb38614a60738ab7dc71ecf4c572ff1336e6

  • SHA256

    cc0790b6136ea16f89b659bfc71bc57d523f57fb6bced65551e453d2fb99e5c8

  • SHA512

    31b442653e9df788f3caee63ee2afc071f3027c5d1475e545b1909dba02c43331619c53b962efccd7ab27ce9f0e6aa3fdc2f0ce1e6ac652c1265e4880b8b1c11

  • SSDEEP

    3072:/z1+MJKrUnFYY5z1i0Nmbi5fJBN9we8KKKRuhoutB:ZIrPj0NmWtN9wPKSoSB

Score
10/10
modiloaderevasiontrojanupx

Malware Config

Targets

    • Target

      cc0790b6136ea16f89b659bfc71bc57d523f57fb6bced65551e453d2fb99e5c8

    • Size

      143KB

    • MD5

      86f60d48450d7f26918b7faf4128fe7e

    • SHA1

      58d5bb38614a60738ab7dc71ecf4c572ff1336e6

    • SHA256

      cc0790b6136ea16f89b659bfc71bc57d523f57fb6bced65551e453d2fb99e5c8

    • SHA512

      31b442653e9df788f3caee63ee2afc071f3027c5d1475e545b1909dba02c43331619c53b962efccd7ab27ce9f0e6aa3fdc2f0ce1e6ac652c1265e4880b8b1c11

    • SSDEEP

      3072:/z1+MJKrUnFYY5z1i0Nmbi5fJBN9we8KKKRuhoutB:ZIrPj0NmWtN9wPKSoSB

    Score
    10/10
    modiloaderevasiontrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks