modiloader | 79e33d9222824af940676a4c4fe4d024eea991cab8fe36ab4473cd942bb688f2 | Triage

Submit
Reports

Overview

overview

Static

static

79e33d9222...f2.exe

windows7-x64

79e33d9222...f2.exe

windows10-2004-x64

Sharing

General

Target

79e33d9222824af940676a4c4fe4d024eea991cab8fe36ab4473cd942bb688f2
Size

219KB
Sample

221128-dx2jtsfd2v
MD5

87ac15b3b2fa2b211c4b4c983e2bf48a
SHA1

98f7521fdc6f0cf669c880c0e43bccae729cbfbe
SHA256

79e33d9222824af940676a4c4fe4d024eea991cab8fe36ab4473cd942bb688f2
SHA512

1a69541a9bd491c5a99179b1c885c3167ed07e256cdd85ec56b616f41819ea7895045f011c06e5df6c8d6d26bd8d7127f30435097a18840d8b7891424d4daf1c
SSDEEP

3072:qTAMgjQVzTiHpn9hd41X36dg/3k6Jny3j8TU9uuZmVIJMcF6G2IF:cA3QFTiJ9s1adg/U6JnyAT9uBJEIF

Score

10^/10

modiloader evasion trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

79e33d9222824af940676a4c4fe4d024eea991cab8fe36ab4473cd942bb688f2.exe

Resource

win7-20220812-en

modiloader evasion trojan upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

79e33d9222824af940676a4c4fe4d024eea991cab8fe36ab4473cd942bb688f2.exe

Resource

win10v2004-20220812-en

modiloader evasion trojan upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  79e33d9222824af940676a4c4fe4d024eea991cab8fe36ab4473cd942bb688f2
- Size
  
  219KB
- MD5
  
  87ac15b3b2fa2b211c4b4c983e2bf48a
- SHA1
  
  98f7521fdc6f0cf669c880c0e43bccae729cbfbe
- SHA256
  
  79e33d9222824af940676a4c4fe4d024eea991cab8fe36ab4473cd942bb688f2
- SHA512
  
  1a69541a9bd491c5a99179b1c885c3167ed07e256cdd85ec56b616f41819ea7895045f011c06e5df6c8d6d26bd8d7127f30435097a18840d8b7891424d4daf1c
- SSDEEP
  
  3072:qTAMgjQVzTiHpn9hd41X36dg/3k6Jny3j8TU9uuZmVIJMcF6G2IF:cA3QFTiJ9s1adg/U6JnyAT9uBJEIF
Score

10^/10

modiloader evasion trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- UAC bypass
  evasion trojan
- ModiLoader Second Stage
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderevasiontrojanupx

behavioral2

modiloaderevasiontrojanupx

© 2018-2024

Terms | Privacy