Overview

overview

10

Static

static

8

2717b8b6a7...97.exe

windows7-x64

10

2717b8b6a7...97.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2717b8b6a7ce1637c1ed3467ce3f6e3cfa321ca26e743fb5596cde7f8e403097

  • Size

    108KB

  • Sample

    221126-r5jwmsbe76

  • MD5

    537316f23cf07bdde46b86413229bebc

  • SHA1

    17130f204141e5add79cfe6e628ff2c2012aaa7d

  • SHA256

    2717b8b6a7ce1637c1ed3467ce3f6e3cfa321ca26e743fb5596cde7f8e403097

  • SHA512

    baf306dd5d73d7e69bfe22d45939ee20959340675e023c4150595547dbbcb94e9c517181a50b7d252ce5c67750a571182c536e1ecb19136fcfa44566b2795678

  • SSDEEP

    3072:koy8j7VnNdrPHaSekwi+mW+2AMTQ6WW44Fout:U8jZ7rvaU3+mWrXM61xFoS

Score
10/10
modiloaderevasiontrojanupx

Malware Config

Targets

    • Target

      2717b8b6a7ce1637c1ed3467ce3f6e3cfa321ca26e743fb5596cde7f8e403097

    • Size

      108KB

    • MD5

      537316f23cf07bdde46b86413229bebc

    • SHA1

      17130f204141e5add79cfe6e628ff2c2012aaa7d

    • SHA256

      2717b8b6a7ce1637c1ed3467ce3f6e3cfa321ca26e743fb5596cde7f8e403097

    • SHA512

      baf306dd5d73d7e69bfe22d45939ee20959340675e023c4150595547dbbcb94e9c517181a50b7d252ce5c67750a571182c536e1ecb19136fcfa44566b2795678

    • SSDEEP

      3072:koy8j7VnNdrPHaSekwi+mW+2AMTQ6WW44Fout:U8jZ7rvaU3+mWrXM61xFoS

    Score
    10/10
    modiloaderevasiontrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

1
T1089

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks