Overview

overview

10

Static

static

d9dd70907d...3c.exe

windows7-x64

10

d9dd70907d...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9dd70907d2306c083044a5aafa0fff7cf5dab0ddb3a99c77ca65557b78c6a3c

  • Size

    500KB

  • Sample

    221126-t9e5cscd2x

  • MD5

    a642f65fbbc8014c4a6f3a7f11c5d60c

  • SHA1

    a0ef7d45c145b8936f953acb3aa34eaf905d68fb

  • SHA256

    d9dd70907d2306c083044a5aafa0fff7cf5dab0ddb3a99c77ca65557b78c6a3c

  • SHA512

    5ba39ad20d2e1e23dc8e05af0449f9e7da126a11bb43fab9bc805a2baac81f7531e4efb0001caec8ee42310d8b7749b5a96307f52f1abc8bd1641e7f525c98fd

  • SSDEEP

    12288:CR1qw2pfw2eJfXv9BkHe7qHLb+ib9RF1Acx5UEDqPI:CRWpfwHJflP2rb+k93Oc9

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      d9dd70907d2306c083044a5aafa0fff7cf5dab0ddb3a99c77ca65557b78c6a3c

    • Size

      500KB

    • MD5

      a642f65fbbc8014c4a6f3a7f11c5d60c

    • SHA1

      a0ef7d45c145b8936f953acb3aa34eaf905d68fb

    • SHA256

      d9dd70907d2306c083044a5aafa0fff7cf5dab0ddb3a99c77ca65557b78c6a3c

    • SHA512

      5ba39ad20d2e1e23dc8e05af0449f9e7da126a11bb43fab9bc805a2baac81f7531e4efb0001caec8ee42310d8b7749b5a96307f52f1abc8bd1641e7f525c98fd

    • SSDEEP

      12288:CR1qw2pfw2eJfXv9BkHe7qHLb+ib9RF1Acx5UEDqPI:CRWpfwHJflP2rb+k93Oc9

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks